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VSTS 2010: All about quality 

Microsoft IDE update focuses on modeling, ALM features 



BY DAVID WORTHINGTON 

Microsoft is making significant 
strides into application life-cycle 
management with the upcoming 
Visual Studio Team System 2010, 
which it says will better enable 
developers and QA professionals 
to collaborate and focus on appli- 
cation quality. 

The company has not com- 
mitted to a release date for VSTS 
2010. Microsoft director of 
developer tools Dave Mendlen 
noted that it would be part of 
next wave of the .NET Frame- 
work, .NET 4.0. Microsoft will 
concurrently ship a standard edi- 
tion of Visual Studio 2010. 

VSTS 2010, formerly known 
by the code name "Rosario," will 
expand the company's ALM 



vision with more roles and fewer 
walls between them, effectively 
"democratizing" ALM, Mendlen 
said. Modeling plays a heavy role 
in how that is accomplished. 

Microsoft is working on a 
multiproduct modeling initiative 
called "Oslo," intended to drive 
model-driven development into 



the mainstream of application 
development. In that effort, the 
company is creating a low-level 
XML-based modeling language 
that can be extended to support 
domain-specific languages, as 
well as BPEL and UML. 

That modeling technology 
will be integrated with Microsoft 



Team Foundation Server (TFS) 
in VSTS 2010, said Cameron 
Skinner, product unit manager 
for VSTS. More specifically, he 
explained that the model would 
offer multiple views and map 
physical architecture to assets. 
Setting up architecture is a 
continued on page 16 ► 



JAVASCRIPT LIBRARY FOR VISUAL STUDIO 



A popular open-source JavaScript library will ship 
with Microsoft Visual Studio going forward. Microsoft 
will contribute to the project and build features into 

Othe .NET Framework that leverage it. 
Scott Guthrie, corporate vice presi- 
dent of Microsoft's .NET Developer 
Division, wrote in his blog that the 
company would bundle the jQuery 
hrie JavaScript library unaltered with Visu- 



al Studio under its existing MIT open-source 
license, as well as ship annotation versions of the 
library that provide Visual Studio IntelliSense code 
completion and help-integration at design time. 

The libraries will work with Visual Studio 2008 
Service Pack 1 (SP1) and Visual Web Developer 
2008 Express SP1, and will be included with the 
ASP.NET Model View Controller framework. 

—David Worthington 



For these developers, Flex was no stretch 



SD Times is talking to developers 
about what they look for in rich 
Internet application platforms. 
Here, three developers explain 
why Adobe's Flex was the pick 
for their projects. 



Rendering RIAs 




BY JEFF FEINMAN 

When R.J. Owen was evaluating 
rich Internet application plat- 
forms for a climate data applica- 
tion he was building for the Dis- 
covery Channel, he had little 
trouble boiling down his selec- 
tion to Adobe s Flex. 

These days, developers have 
no shortage of RIA platforms at 
their disposal. AJAX, Sun's 
JavaFX and Microsoft's Silver- 
light are among the choices. 

But Owen, senior developer 
at Denver-based user interface 
designer EffectiveUI, liked the 
4-year-old Adobe platform's fea- 
ture set and its ability to create 
continued on page 18 ► 




Discovery Channel created an app that offers information on global climates. 



ORACLE BRINGS 
WEBLOGIC APP 
SERVER TO GRID 

BY ALEX HANDY 

BE As Web Logic is now a firm part 
of Oracle's application strategy. 

The company announced the 
availability of the Oracle 
Web Logic Application Grid at its 
OracleWorld conference in San 
Francisco in late September. This 
addition to the company's Fusion 
Middleware lineup positions 
BE As application server to deal 
with Oracle-centric grid-hosted 
applications. The new version 
also mixes Oracle's Coherence 
3.4 and JRockit Mission Control. 

Oracle acquired BE A Systems 
in January; this is the first rollout 
since then. 

Updates to some of Oracle's 
development tools were also pre- 
viewed. A new JDeveloper llg 
brings with it a host of Web-cen- 
tered development features, 
including support for JAX-WS 
Web services, numerous JSF com- 
ponents and tighter integrations 
with Oracle Web Logic Server. 

The companion Oracle Appli- 
cation Development Frame- 
work includes the new Oracle 
Platform Security Services 
Framework, which lets develop- 
ers bring Oracle's security and 
identity features to bear on their 
applications without having to 
deal directly with the APIs and 
services themselves. 

On top of the new features, 
the Oracle Application Develop- 
ment Framework llg and JDe- 
veloper llg both include integra- 
tions with Oracle's latest version 
continued on page 14 ► 
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Who's donating to Linux kernel? 



Keynoter to Plumbers: Follow Red Hat f s lead in upstream contributions 

Linux distributions' kernel code donations 



BY ALEX HANDY 

Red Hat has been prolific as the 
largest corporate contributor of 
code to the Linux kernel, 
according to the keynote speak- 
er at the inaugural Linux 
Plumbers Conference. 

The event drew developers 
to Portland, Ore., to discuss the 
state of the OS. In his keynote, 
Greg Kroah-Hartman, main- 
tainor of the USB and other sub- 
systems in the Linux kernel, 
examined the contributions of 
those who have made Linux 
what it is today. All of the lists 
tracked contributions as patch- 
es, not initial donations to Linux. 

Kroah-Hartman used the 
analysis to advocate for 
upstream contributions to the 
Linux kernel. 

By looking at contributors' 
e-mail addresses, Kroah-Hart- 
man surmised that most contri- 
butions have come from indi- 
vidual donors with no apparent 
corporate affiliations. Red Hat 
has been the largest corporate 
contributor, with 11,846 patch- 
es to the Linux kernel. By con- 
trast, Canonical, the company 
behind Ubuntu Linux, is the 
79th most active contributor, 
with 100 patches contributed 
back upstream to Linux proper. 

Canonicals limited contri- 
butions to the ecosystem on 
which it depends will be detri- 
mental to both the company 
and the Ubuntu distribution 
over time, Kroah-Hartman 
warned. It should be noted, 
however, that Kroah-Hartman 
was only discussing kernel con- 
tributions; his analysis excluded 
graphical user interface proj- 
ects, such as Gnome and KDE. 

"There are the distros that 
base themselves off of other dis- 
tros, like Ubuntu and [Lance 
Davis'] CentOS. These distros 
have yet another layer between 
them and the original develop- 
ers. Patches rarely, if ever, flow 
backward into an upstream dis- 
tro, and the developers are very 
unlikely to push their changes 
into the upstream packages. 
They don't feel the need or don't 
realize the issues involved, as 
they rely on the upstream distro 
so tightly," said Kroah-Hartman. 

The GNU Compiler Collec- 
tion (GCC) is another point 
where many large companies 
contribute to Linux. Software 
development tool maker Code- 



Sourcery leads the list of corpo- 
rate contributors to the GCC. 
CodeSourcery sells derivatives 
of GCC, including G++, a bun- 
dled Eclipse and GCC suite for 
Linux and Windows. 

Red Hat, IBM, Novell, 
Google, Intel and AMD, in that 
order, were the other corporate 
names on the list of the top 10 
GCC contributors; the rest of 
the top 10, on the basis of their 
e-mail addresses, are assumed 
to be amateur developers. 

Elsewhere in Linux, Kroah- 
Hartman's calculations showed 
that IBM was the second most 
prolific organization in its con- 
tributions to the kernel, with 
Novell, Intel, Oracle, the Linux 
Foundation and SGI rounding 
out the organizational names 
among the top 10. 

According to Kroah-Hart- 
man, Red Hat led in contribu- 
tions to X.Org; Sun Microsys- 
tems was also in the top 10 
here. Linux manual pages came 
primarily from Google and the 
Linux Foundation. 

Among the other Linux dis- 
tributions in the list of kernel 
contributors, companies focused 
on embedded development 
stood atop the pile. MontaVista, 
a provider of embedded devel- 
opment tools and systems, 
placed 14th with 1,074 patches. 
Wind River offered up 207 ker- 
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change jobs. 
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In presenting these tallies to the Linux Plumbers Conference, keynoter Greg Kroah-Hartmann took care to note 
that they represent "quantity/' as best he could determine it, and not the "quality" of the contributions. The 
penguin slide hammered home his assertion that nothing should compromise upstream contributions to the kernel. 



nel patches, and rPath, a compa- 
ny founded by former Red Hat 
employees, placed 56th with 186 
patches. 

KERNEL COMES FIRST 

Kroah-Hartman implored de- 
velopers to put the Linux kernel 
first in their development prior- 
ities, to the point of advocating 
that they resign if their compa- 
nies don't support them. 



"If you are out here, working 
for a company that doesn't allow 
you to contribute upstream due 
to internal company issues, or 
just a lack of time allowed due 
to other things, that can be a 
problem for a developer who 
wants to contribute upstream 
but can't," said Kroah-Hartman. 

"The solution? Quit and go 
work for one of the companies 
that allow you to do this! ... 



Right now, there is a very huge 
scarcity of developers who know 
how to do this kind of work. 

"Lots of companies are try- 
ing madly to train their internal 
engineers on how to work with 
the community in this kind of 
very different development 
model. They are looking for and 
need people that already know 
how to do this kind of thing. So 
don't sell yourself short." I 



IBM reaches out on social software research 



BY JEFF FEINMAN 

Building on research that 
spawned its Jazz technology, 
IBM has launched the Center 
for Social Software. The initia- 
tive will explore applications 
for social software and will look 
to commercialize social net- 
working best practices, cus- 




Irene Greif: Center will explore 
prerequisites for 'viral takeoff/ 



tomize social networks to cater 
to different businesses, and 
advance social software gover- 
nance by creating formal poli- 
cies around social computing. 

IBM hopes to use the infor- 
mation collected to design 
Web 2.0 collaboration products, 
including social discovery solu- 
tions and scalable architectures 
for social software. 

The center, located in Cam- 
bridge, Mass., will bring togeth- 
er IBM developers, academic 
researchers and IBM cus- 
tomers for collaborative work 
on social computing projects. 

"We are researching what 
qualities software needs to have 
for viral takeoff, and whether 
there are ways to manage a 
deployment to assure that 
adoption will be smooth and get 
to critical mass at an acceptable 
pace," said Irene Greif, director 



of the Center for Social Soft- 
ware. "We want to share data, 
and there actually is some sig- 
nificant research content to the 
task of [creating] the data for 
sharing." 

Dow Jones and Thomson 
Reuters are the first companies 
to participate in the social soft- 
ware initiative, IBM said. 

HEALTH-CARE INSIGHTS 

William Marder, senior vice 
president of research for the 
health-care business at Thom- 
son Reuters, said the company 
is interested in the potential of 
next-generation Web tools "to 
enhance our ability to under- 
stand what is happening to 
patients. The cost and quality of 
health care are complex issues 
that can benefit from social net- 
working tools that help decision 
makers form a shared under- 



standing of what the system 
is doing." 

IBM's interest in software for 
collaborative projects began with 
its Jazz technology, which has 
been infused into existing IBM 
products, such as ClearCase and 
ClearQuest, to stimulate collabo- 
ration and extensibility. Back in 
January, IBM released Rational 
Team Concert Express, a real- 
time collaboration product for 
globally distributed teams. It was 
the company's first product to 
use Jazz. 

The Center for Social Soft- 
ware will draw on research 
undertaken during Jazz's devel- 
opment, Greif said. 

"We did contextual collabo- 
ration for developers in the 
original Jazz research projects 
and now are looking at social 
software in context for large 
projects," she said. I 
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BY JEFF FEINMAN 

Hord Tipton has always been 
big on certification. 

When he was the CIO of 
the U.S. Department of the 
Interior, he mandated Certified 
Information Systems Security 
Professional (CISSP) certifica- 
tion for people working in criti- 
cal security jobs, even though 
the requirement was met with 
resistance from security experts 
who thought the CISSP exami- 
nation was too difficult. 

Tipton retired from his gov- 
ernment post two years ago. 
But he remains adamant about 
security certification in his 
work with the International 
Information Systems Security 
Certification Consortium, or 
(ISC)2, a not-for-profit organi- 
zation focused on certifying 
information security profes- 
sionals through vendor-neutral 
educational products, services 
and credentials. 

Tipton, (ISC)2's director, 
said the keys to strong software 
security are good communica- 
tion of business information to 
the coder and good change 
management. The coder should 
receive solid business logic 
so that he or she can assess the 
right security modules and 
objects to place into the appli- 
cation, he said. 

Improper configuration of 
software at deployment results 
in flaws, and changes must be 
made by people trained in secu- 
rity, Tipton added. 

"Security must be baked in 
from the very beginning of the 
development process," Tipton 
said. "I think we're captured by 
the notion that security costs 
more if we build it in. (ISC)2 
looks at it from the life-cycle 



approach that the total cost of 
the application should count 
the dollars spent on the begin- 
ning and on the end. 

"Maintenance generally 
runs about 80% of the cost of 
any application to begin with, 
and if you leave a major piece 
out and don't have anything 
to patch it, then serious 
things happen." 

Tipton cited an IBM Sys- 
tems Sciences Institute study 
that found fixing defects can 
cost up to 15 times more dur- 
ing the software testing phase 
but 100 times more during 
maintenance and operations. 

If security is not implement- 
ed from the beginning of the 
life cycle, vulnerabilities are 
more likely to be exploited and 
costs will rise, he said. 

One obstacle to "baking in" 
security is the cultural divide 
that often exists between pro- 
grammers and security experts. 
Programmers might have set 
ways of creating software that 
clash with what the business 
seeks, Tipton said. 

"Change is disruption, and 
programmers are quite com- 




Hord Tipton of (ISQ2 balks at notion 
that built-in security costs more. 



fortable once they have a rou- 
tine by which they develop 
code," he noted. 

To narrow the gap between 
programmers and the business 
side, (ISC)2 has created the 
Certified Secure Software Life- 
cycle Professional (CSS LP) 
certification, which involves an 
examination on security topics 
related to software require- 
ments, design, implementa- 
tion, testing and other parts of 
the software life cycle. 

Since (ISC)2 believes de- 
velopers should be involved in 
security implementation from 
the software design and 
requirements phase though to 
deployment, the purpose of 
the CSS LP credential is to 
"practice what we preach," 
Tipton said. 

Steven Lipner, Microsoft's 
senior director of security 
engineering strategy, said 
Microsoft believes that "to bet- 
ter protect customers from 
evolving threats, the software 
community must come togeth- 
er and incorporate security 
earlier in the software develop- 
ment life cycle." 

Toward that end, Lipner 
said, "Microsoft strongly sup- 
ports industry efforts to train 
and certify developers in securi- 
ty, especially those in organiza- 
tions with limited resources. 
Along with executive commit- 
ment, tooling and state-of-the- 
art processes, certification and 
training are critical parts of 
secure development." 

The first CSS LP exam is 
scheduled for the end of June 
2009, and applications to par- 
ticipate in the assessment will 
be accepted through March 
31. Information is at isc2.org.! 



EQUINOX HEADS FOR 
BOOLEAN PROVISIONING 

P2 platform gets handle on components 



BY ALEX HANDY 

Equinox, the reference im- 
plementation of the Open 
Source Gateway Initiative, has 
been building a provisioning 
platform called p2 over the 
past two years to control the 
thousands of bundles and 
components that OSGi shops 
generate. Recently, p2 added 
the ability to manage those 
artifacts with real-world lan- 
guage, such that developers 
can tell the provisioner to 
build the application bundle 
that will cause the least 
amount of change. 

The work has Jeff McAffer, 
co-lead of the Eclipse Equinox 
project and the 
founder of Code 9 
Software, fired up 
about p2 and its 
potential effects 
on the develop- 
ment world. 

"We've gone 
off and convinced 
everybody that 
components are 
good," McAffer 
said. "But we did- 
n't really think far 
enough forward 
to how all these 
people who have components 
have to manage them. There 
are lots of versions; some places 
have thousands of them." 

McAffer described p2 as 
a "basic mechanism for allow- 
ing you to define configura- 
tions of bundles, configure 
them and update them. But it's 
not just bundles. It's a com- 
pletely extensible architecture. 
You can manage application 
servers too." 

Equinox p2 is designed to be 
a platform, not just a provision- 
ing server. McAffer said since 
that every user has a different 
need from his or her provision- 
ing system, it was deemed more 
appropriate for p2 to be a plat- 
form for such work. Through 
extensions to the system, devel- 
opers could insert hooks for 
Linux-based update software, 
such as Debian's Apt-Get or 
Red Hat's Yum. 

When a server is called upon 
to run a specific OSGi bundle, 
it could then retrieve the neces- 
sary libraries and components 




Equinox project 
McAffer is fired 



for the specific Linux distribu- 
tion used underneath. 

"Currently, p2 just supports 
Eclipse use cases, but more and 
more at Code 9 and in the p2 
project we're expanding that 
beyond just the Eclipse/Equi- 
nox/OS Gi realm. We're into 
deploying WARs [Web applica- 
tion archives] and RPMs [Red 
Hat package managers]," said 
McAffer. 

McAffer began the p2 proj- 
ect while working at IBM two 
years ago. The project moved 
into Eclipse about a year and a 
half ago, he said, and has 
recently benefited from signifi- 
cant time and effort from the 
French develop- 
ers of SAT4J. 

Those devel- 
opers brought 
pseudo-Boolean 
solvers to the 
table, which gives 
p2 a unique capa- 
bility, according 
to McAffer. 

"With a pseu- 
do-Boolean solver, 
you end up able 
to specify opti- 
mization solves," 
he said. "You 
can say, T want the solution 
that causes the least change to 
the system.' Lots of these are 
theoretically possible to 
define. You can end up with 
provably correct solutions 
coming out the other end." 

McAffer said Equinox will 
likely continue as the refer- 
ence implementation for 
OSGi, even when the new 
OSGi specification arrives ear- 
ly next year. He added that p2 
may eventually become its own 
project within Eclipse, but for 
now it remains a subproject of 
the Equinox team. 

That status, however, doesn't 
mean developers aren't already 
eager to use p2. 

"One of the things we're see- 
ing is that people are really look- 
ing at how [to] apply this across 
their enterprise," said McAffer. 
"How can they have productized 
versions of p2?" 

Those are questions that 
remain to be solved as p2 con- 
tinues on its unique path of 
development. I 
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Embarcadero changes Change Manager 



BY ALEX HANDY 

Embarcadero Technologies is 
looking to bring developers 
closer to databases with its 
release of Change Manager 5.0. 

The new version is the first 
since the company's acquisition 
of CodeGear, and while the 
synergy hasn't quite reached 
Change Manager, the lines 
between developer and DBA 
are blurring. 

Gregory M. Keller, vice 
president of product manage- 
ment at Embarcadero, said that 
while those lines may be hazy, 
proper life-cycle management 
can keep the flow going. 

"It takes a village to revise 
an application," said Keller. "It 
starts with business drivers and 
ends with wholesale moves 
over a weekend, from develop- 
ment to test machines and on 
to production. 

"The foundation of Change 
Manager was designed with 
multiple constituencies in 
mind: DBAs and developers at 
the core. So when a developer 
has done a comparison, has 
taken snapshots and has a 
modification of the deep code 
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Embarcadero's Change Manager 5.0 can compare database snapshots to 
ensure that changes in the data don't get lost in the ALM shuffle. 



in the database, we can bring 
that to the DBA." 

Change Manager can hold 
numerous schemas in memory 
and compare them with newly 
taken snapshots to determine 
exactly where change has 
occurred. The Eclipse-based 
tool brings database adminis- 
trators the details of each 
change and can tie such modi- 
fications to their repercussions 



throughout databases. 

"Developers are then inte- 
grating with DBAs in the same 
way they integrate with each 
other," said Keller. "They're 
checking code into a source 
control system and triggering 
tickets to go to DBAs, [who] 
then push to production." 

The latest version of 
Change Manager adds support 
for DB/2 9.5, Microsoft SQL 



Server 2008 and Oracle 11^ 
The tool's metadata queries 
were sped up to increase the 
performance of comparisons 
between databases, and new 
source controls were added via 
the Eclipse API. 

Change Manager 5.0 will 
likely be one of the last releas- 
es accomplished at Embar- 
cadero without input from 
CodeGear. While some collab- 
oration on the release did 
occur, Keller said, technically it 
was not produced with the help 
of CodeGear. 

CodeGear s chief evangelist, 
David Intersimone, said the 
new focus on databases doesn't 
really change much for Code- 
Gear, save for the potential 
points of synergy. 

"The early days of develop- 
ment tools [were] about algo- 
rithms, but today everything's 
about database application 
development," said Intersi- 
mone. With the combination of 
Embarcadero and CodeGear, 
he said, "we have the strong 
database technology and exper- 
tise, so we can add more data- 
base capabilities." 



According to Keller, that 
will mean more modularly 
written Eclipse layers in the 
future. Currently, the com- 
bined company offers numer- 
ous Eclipse-based products, 
such as Change Manager. 

"A lot of the strategy is to 
integrate our own product 
line," said Keller. "We've now, 
underneath the covers, built 
these common stacks, such as a 
database management layer 
stack. Internally we call it an a 
la carte method of building 
and deploying product. We 
could have chosen anything, but 
Eclipse gave us this level of flex- 
ibility to customers." 

It's unlikely that Embar- 
cadero will release Eclipse plug- 
ins, Keller said, though the 
company probably will move 
toward a customizable build of 
Eclipse that can be created on a 
per-customer basis. 

That said, it's still early on 
the road map, Keller acknowl- 
edged. By next July, the one- 
year anniversary of Embar- 
cadero's CodeGear acquisition, 
things will be much more inte- 
grated, he said. I 
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• Insurance: lower aggregated risk to natural disasters by visualizing existing customers along with flood, 
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• Government: create e-government, citizen self-service web portals 
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Visit www.mapinfo.com/sdtimes to download whitepapers on deployment and uses of location intelligence, 
view streaming media pieces, download free SDK's and register for upcoming webinars. 
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WS02 Data Services secures services using WS-* standards. 

WS02 brews data 
services on Java 



BY DAVID WORTHINGTON 

Data services are emerging as a 
secure alternative to a bete noir 
of privacy and security watch- 
dogs: the sharing of sensitive 
data on physical media. A 
developer of Web services 
infrastructure software has 
released an open-source solu- 
tion for creating data services 
that it says is more straightfor- 
ward than other solutions. 

WS02 released WS02 Data 
Services, which lets database 
programmers expose data as 
Web Services Standards-based, 
representational state transfer 
(REST)-style Web resources. 
The offering works with any 
relational database that is 
accessible via the Java Database 
Connectivity standard, as well 
as with comma-separated-value 
file formats and Microsoft 
Excel spreadsheets. 

Last year, a U.K. government 
CD containing personal data on 
25 million people was lost in the 
mail and was never recovered, 
touching off a political firestorm. 
That snafu could have been 
avoided had the British govern- 
ment set up a data service to 
share such information directly 
from its database, said WS02 
CTO Paul Fremantle. 

Creating data services is 
often easier said than done, 
however, because database pro- 
grammers are in unfamiliar ter- 
ritory when using XQUERY and 
XSL Transformations (XSLT), 
he said. 

Fremantle described WS02 
Data Services as a quick-and- 
dirty solution. "We started with 
KISS [keep it simple, stupid]: 
They take what they know — a 



SQL query or a stored proce- 
dure — and map it into a system." 

James Governor, principal 
analyst and founder of Red- 
Monk, said in a prepared state- 
ment that "heavyweight indus- 
try standards for data in- 
tegration are not being widely 
deployed, because of their 
inherent complexity. WS02 is 
addressing this complexity with 
its Data Services tooling, which 
is designed for both XML Web 
services and more lightweight, 
REST-style resources." 

WS02 Data Services pro- 
vides caching and throttling 
functions for accessing databas- 
es — capabilities that Fremantle 
said are first steps toward more- 
advanced features. Multiple 
data services can be exposed as 
a single service in this initial 
release, which Fremantle said 
is a precursor to Master Data 
Management. 

Future versions may also 
implement XQuery and XSLTs 
on top of the basic offering. 

"We are an open-source proj- 
ect and will release early and 
often," Fremantle said. 

For the current release, he 
said, people told WS02 they 
needed a solution that would 
make data useful in a service- 
oriented architecture. "We are 
not trying to boil the ocean 
[with this release]. This is not a 
Rolls-Royce ... it is like a Ford 
Fiesta with security and airbags, 
but no toaster and mini-bar." 

WS02 offers a utility to con- 
vert XML-based files from 
Data Services into scripts that 
can be leveraged by its PHP 
data services library, which was 
released in September. I 



Intel suite takes aim at 
XML-induced bottlenecks 

Instructions optimized for next-gen processor 



BY DAVID WORTHINGTON 

Focusing on faster XML pars- 
ing and schema validation, as 
well as integration with Java 
development software and mid- 
dleware, Intel has released 
XML Software Suite 1.1. 

The company also intro- 
duced a benchmark utility that 
it says will establish a baseline 
to compare the performance of 
XML solutions. 

The release features updat- 
ed XML processing libraries to 
offset bottlenecks in enterprise 
workloads, according to David 
Hinz, director of marketing and 
business development at Intel. 

"Looking at traffic in enter- 
prise workloads, we are seeing 
the rise of XML [as] a factor in 
what chews up a lot of CPU 
cycles in systems," said Hinz. 
"It is important enough for us 
to get after it and provide bet- 
ter processing libraries than 
there are today." 



To that end, XML Software 
Suite is optimized with instruc- 
tions for Intel's next-generation 
"Nehalem" microarchitecture, 
Hinz said, adding that the 
release will let developers write 
parallelized code that scales 
with hardware. 

Nehalem will be created 
using the company's hafnium- 
based 45nm high-k metal gate 
silicon technology. It will be the 
first Intel processor to use Quick- 
Path, a technology for shared 
memory among processors. 

XML Software Suite 1.2 will 
follow in November with an 
updatable Document Object 
Model tree structure that is 
refreshed when necessary, in- 
stead of being recreated, for 
higher performance, Hinz said. 

API improvements and 
extended support for Web ser- 
vices are slated for the release. 
Intel additionally will support 
the Streaming API for XML 



(StAX), JSR 173. 

For version 1.1, Intel created 
a direct Java interface to ease 
adoption into middleware and 
development environments such 
as Apache Tomcat and Eclipse. 
It also added compatibility with 
Red Hat Enterprise Linux 5. 

Intel is making its XML 
benchmark utility broadly avail- 
able as a nonbranded open- 
source binary. 

"We are attempting to put a 
stake in the ground for standard 
benchmarks," Hinz said. 

XML Suite is available for 
US$199. Intel provides a 30-day 
evaluation copy for no charge at 
intel . com/software/xml . 

The company also has part- 
nered with SOA software mak- 
er MuleSource to offer integra- 
tion support for the Intel XML 
Software Suite via Mule Xpack. 

Xpack includes a 60-day 
license to XML Software Suite, 
according to Hinz. I 



Software AG unifies SOA governance 

CentraSite ActiveSOA links asset management with enforcement 



BY DAVID WORTHINGTON 

Software AG has combined its 
SOA governance offerings into 
a single solution, delivering on 
a promise to integrate web- 
Methods' products with its own. 

Software AG's CentraSite 
ActiveSOA, slated for general 
release in the second quarter of 
2009, combines the asset man- 
agement functionality of Cen- 
traSite Enterprise with the pol- 
icy enforcement of CentraSite 
Governance. CentraSite Gover- 
nance was formerly web Meth- 
ods' Infravio X- Registry. 

Software AG acquired web- 
Methods for US$546 million 
in 2007. 

CentraSite Governance al- 
lowed enterprises to attack SOA 
from the top down, delivering 
services within a short time 
frame, while CentraSite Enter- 
prise's bottom-up approach to 
life cycle management provided 
for incremental SOA evolution, 
said John Conley, director of 
public relations for Software AG. 

Forrester Research senior 
analyst Larry Fulton said he 
believes the release, which "ful- 



ly integrates the intellectual 
property from both the [web- 
Methods] Infravio acquisition 
and CentraSite, is a good move 
for Software AG. It will end cus- 
tomer confusion caused by the 
earlier CentraSite Governance 
and CentraSite Enterprise edi- 
tions, and it allows the company 
to focus its efforts on its new 
flagship offering." 

Fulton added that the re- 
lease marks an unambiguous 
step away from Fujitsu, which 
has been developing SOA infra- 
structure software with Soft- 
ware AG under an alliance that 
has been in place since 2005. 

CUSTOMIZED TRANSITIONS 

Aside from converging SOA 
adoption strategies, ActiveSOA 
lets developers customize the 
SOA life cycle with transitions to 
enforce the right policy at the 
right time and to automate gov- 
ernance processes, said Franco 
Castaldini, director of SOA gov- 
ernance product marketing. It 
also offers impact analysis 
through metadata, as well as 
expanded reporting capabilities 



to provide IT with access to 
build reports and logs, he said. 

Further, Software AG has 
added federation facilities for 
migrating applications from proj- 
ect-level adoption in order to 
build out an enterprise-level 
proposition. "CentraSite be- 
comes a central point and a sin- 
gle system of record," ensuring 
compliance of architectural 
standards for SOA on every proj- 
ect, he said. 

Services are made more dis- 
coverable via dashboards and 
smart lists that are similar to the 
Genius feature from Apple's 
iTunes software, he said. 

Conley noted that customers 
have role-based access and that 
service information is pulled 
from the repository. 

Notifications are sent to 
administrators when changes are 
made in the service registry, 
Castaldini said, adding that 
ActiveSOA provides better oper- 
ational accountability than the 
company's previous releases. 

Conley said developers can 
send notifications to downstream 
users via impact analysis. I 
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Microsoft tips .NET, Windows Server evolutions 



BY DAVID WORTHINGTON 

Microsoft has detailed some of 
the .NET 4.0 feature set and 
has explained how it will evolve 
Windows Server to host com- 
posite applications by extending 
the Application Server Role. 



Earlier this month, the com- 
pany announced its road map 
for Windows Communication 
Foundation (WCF), Windows 
Workflow Foundation (WF) and 
a Windows Server 2008 update 
code-named "Dublin." 



Microsoft's focus is on mak- 
ing the creation of representa- 
tional state transfer-style appli- 
cations easier by including 
templates and deeper integra- 
tion with ASP.NET, said Burley 
Kawasaki, director of product 



management in the Connected 
Systems Division at Microsoft. 

Another design goal is to 
make integration between WCF 
and WF more seamless, Kawasa- 
ki said. Microsoft is leveraging 
Extensible Application Markup 
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Language (XAML) to deepen 
that integration, using it as a 
common model stack for appli- 
cations, he noted. 

"This is an important step 
toward capturing the entire 
application definition in a single 
format (XAML) that can gener- 
ate different views of that defini- 
tion," John R. Rymer, a vice 
president and principal analyst at 
Forrester, wrote in an e-mail. 

WF will be expanded to sup- 
port more workflow models and 
to enable more-complex busi- 
ness rules to be built, Kawasaki 
said. It will also include a broad- 
er set of prebuilt activities. 

Deploying applications with- 
out putting the onus on develop- 
ers to write complex infrastruc- 
ture code is another objective of 
the .NET 4.0 wave. Dublin 
extends the Application Server 
Role with infrastructure code to 
handle asynchronous long-run- 
ning processes that are common 
in workflow-centric applications, 
said Kawasaki. 

Dublin will ship as an add- 
on for Windows Server 2008 
and will be shipped with the 
Server product in later releases 
of Windows Server, according 
to Kawasaki. Future versions of 
Microsoft Dynamics AX and 
CRM applications will also be 
built using Dublin on the back 
end for improved management 
and scaling, he said. 

Dublin also has facilities for 
"Oslo," a multiproduct effort to 
develop technology that will let 
customers build, deploy, design 
and manage composite applica- 
tions. Developers will create 
models within Visual Studio, 
and Dublin will serialize the 
models from a repository into a 
format based on XAML for exe- 
cution by the Application Serv- 
er, Kawasaki explained. 

"Microsoft has never re- 
ferred to any of its software as 
an 'application server' before, 
even though they've had one 
since Microsoft Transaction 
Server (aka 'Viper')," Rymer 
wrote. "Rather, Microsoft has 
always bundled its app server 
software with Windows Server. 
This may change. 

"The core goal of CSD 
[Connected Systems Divi- 
sion] — to simplify creation, 
deployment and maintenance 
of SO A applications by using 
executable models — still must 
be proven. If Microsoft gets it 
right, the results will be very 
useful for developers." I 
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IBM adds static analysis to AppScan 



BY JEFF FEINMAN 

IBM released two new edi- 
tions of its Rational AppScan 
Web application security suite 
to integrate security functions 
into the development and 
build stages of the software 
life cycle. 

Rational AppScan Develop- 
er Edition (DE) and Rational 
AppScan Build Edition offer 
developers a "finite list" of vul- 
nerabilities. The tools inte- 
grate into such IDEs as Ratio- 
nal Application Developer and 
Eclipse, according to IBM 
executives. 

The ability to integrate App- 
Scan Developer Edition makes 
it easier to use than a separate 
scanning tool, said David 
Grant, director of marketing for 
IBM Rational's security solu- 
tions. He likened the edition to 
a built-in spell checker for 
developers' IDEs, noting that it 
generates reports as actionable 
task lists, rather than as detailed 
vulnerability reports, to fix 
problems faster. 

The edition also integrates 
with Rational AppScan's Re- 
porting Console to provide 
Web-based reporting. 

IBM claimed the Developer 
Edition is the first industry 
product to include static analy- 
sis, black-box testing, runtime 
analysis and string analysis. 

FEWER FALSE POSITIVES 

String analysis focuses on 
resolving false positives, which 
IBM called the biggest chal- 
lenge plaguing current security 
code scanning solutions. 

Until now, the most 
advanced technique for analyz- 
ing code security has been taint 
analysis, which tracks input val- 
ues through the system but 
relies on the developer to 
determine whether the data 
was properly analyzed, IBM 
said. String analysis, by con- 
trast, automates code analysis 
configuration. 

"If you think about the prob- 
lem with code testing for secu- 
rity, at least, you need a knowl- 
edge of both code and security," 
Grant said. "String analysis is a 
form of static testing that gives 
the user more understanding of 
the application, and [it] auto- 
mates more of the discovery of 
the application and the actual 
scan test configuration so that 
you're not leaving [it up to] the 
developer to know how to 
tweak a test or scan before actu- 



ally running the test." 

Rational AppScan Build 
Edition, meanwhile, embeds 
Web application security test- 
ing into build management in 
order to automate the security 
test function. It is focused on 



finding vulnerabilities early in 
the development life cycle. 

Like Rational Developer 
Edition, the Build Edition com- 
bines analysis techniques for 
scanning, according to IBM. 

Build Edition can also auto- 



mate application vulnerability as part of that build automa- 



scanning and accomplish such 
tasks as JavaScript execution and 
Web Service testing. 

"When the build runs, 
whether it be nightly or weekly, 
we can test for security issues 



tion, and then reject the build 
or send back the issues to 
developers," Grant said. "They 
can then open AppScan DE 
within the IDE and fix those 
tickets and issues." I 



Intellectuals solve problems. 
Geniuses prevent them. 



— Albert Einstein 
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Sony Ericsson bridges Flash to Java 



BY JEFF FEINMAN 

Sony Ericsson has released a 
pair of SDKs for Project 
Capuchin, which bridges the 
Flash Lite and Java program- 
ming environments, and for its 



Xperia XI slider phone. 

Project Capuchin is an API 
that combines Flash Lite and 
Java ME technologies so that 
developers can use attributes 
from both stacks to create 



applications for Sony Ericsson 
mobile phones. Analyst Vish- 
wanath Venugopalan with 451 
Group noted that Java and Flash 
interoperate to some extent on 
the desktop, since Java EE Web 



services can back Flash-based 
user interfaces fairly easily. But 
general interoperability and 
remoting, such as Flash code 
calling Java code on the client, 
are harder to pull off and are rel- 
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atively uncommon, he said. 

"On mobile devices, the 
Flash Lite developer communi- 
ty is definitely further along the 
path of offering rich user experi- 
ences than its Java ME counter- 
part," Venugopalan said. "This 
may change down the road, with 
Sun's JavaFX Mobile, but it's 
clear Flash Lite has a sizable 
head start. Project Capuchin 
acts as a bridge between Flash 
and Java on the device and 
enables flexible cross-calling 
between the runtimes." 

Venugopalan added that 
Flash user interface components 
may be incorporated into Java 
applications with Capuchin's uni- 
fied packaging tools. While there 
are other open-source tools that 
package Flash components as 
Java, such as Google's Jarpa (Java 
Packaging for Flash Lite Devel- 
opers), few products offer the 
bridging that Project Capuchin 
provides, he said. 

Sony Ericsson executives 
said the SDK contains a new 
packaging tool that makes it 
possible to bundle existing 
Flash Lite content into a jar 
file. Project Capuchin applica- 
tions can be used on Sony 
Ericsson's C905 Cyber-shot 
phone, and developers who 
use the packaging tool can test 
applications on the C905. 

XPERIA PANELS 

Sony Ericsson also released a 
beta version of an SDK for Win- 
dows Mobile 6.1, which can be 
used to adapt existing Windows 
Mobile applications and create 
new ones, according to the com- 
pany. Within the SDK is a built- 
in Xperia XI device emulator 
that lets developers test and 
debug applications for the 
phone without using hardware. 

The Xperia Panels feature 
brings lightweight applications 
that can be personalized. It can 
work with HTML, Cascading 
Style Sheets, C and C++. 

The Xperia XI, announced 
at Mobile World Congress in 
February, has a 3-inch display 
and touch navigation. 

"Making the Windows 
Mobile SDK available for free 
to developers and mobile con- 
tent creators will accelerate 
the development of new panels 
and applications for the Xperia 
XI, offering consumer choice 
and personalization," said 
Rikko Sakaguchi, head of cre- 
ation and development at Sony 
Ericsson. 

Both SDKs, along with tuto- 
rials, are available free at www 
.sonyericsson.com/developer. I 
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, COMPANIES , 



Fujitsu will establish a company in North America called Fujitsu North 
America Holding to strengthen its business base in the region. The 
company said the move would solidify ties among Fujitsu Consulting, 
Fujitsu Computer Systems and Fujitsu Transaction Solutions. Farhat Ali 
has been appointed president and CEO of Fujitsu North America Hold- 
ing. Ali previously held that role at Fujitsu Computer Systems. 



, NEW PRODUCTS , 



Multicore application development company RapidMind has launched 
add-ons to the RapidMind platform to deploy applications such as 
image reconstruction and analysis for ultrasound and CAT scans. The 
company said RapidMind Imaging Extensions let medical imaging and 
health-care companies build manageable applications around multi- 
core processors from Advanced Micro Devices and Intel . . . Curl 
released the Sales Force Dashboard, which displays information for 
use by regional sales managers. The application can transform and 
aggregate data from a subset obtained from Salesforce.com. Curl said 
the application stores data using SQLite and uses standard Curl dis- 
play components that have few lines of code. 



_L 



UPDATES 



_L 



Visualization and lab management company Surgient has integrated 
its product line with Hewlett-Packard's Server Automation software 
to automate the creation of identical production environments. Com- 
pany executives said development test teams can now build replicas of 
the production systems in the virtual environment . . . Data visual- 
ization company Composite Software's Information Server now oper- 
ates with Hewlett-Packard's Neoview enterprise data warehouse plat- 
form. The Information Server provides the data virtualization 
software, and Neoview can handle hundreds of terabytes of data and 
"massive" data queries, Composite said . . . Aonix, a provider of 
embedded virtual machines, has added cross-platform Motif GUI appli- 
cation development to its object-oriented user interface management 
system environment for 64-bit architectures. TeleUSE 4.0 offers 64- 
bit TeleUSE runtime libraries and the associated C/C++ header files 
used in the construction of 64-bit application executable files . . . Elec- 
tric Cloud made its product line available for Microsoft's High-Perfor- 
mance Computing Server. Microsoft describes the recently released 
Windows HPC Server 2008 as a 64-bit server that can scale to thou- 
sands of processing cores, and it includes management consoles to 
help developers monitor systems . . . Project management software 
and Web-based bug tracking company Elementool has launched ver- 
sion 6.0 of its Elementool Bug Tracking project manager. Company 
executives said Bug Tracking 6.0 integrates with four other Elemen- 
tool products: Help Desk, Time Tracking, File Sharing and Forums. The 
release offers new instant messaging and reporting features 
. . . AppDNA, a provider of application compatibility testing for 
Microsoft environments, has added several features to AppTitude 2.6. 
Quick Start Report uses a traffic-light format to provide a status 
overview of application compatibility, while the Overview Report fea- 
ture can view an application's status across Microsoft platforms . . . 
Digital Map Products, a provider of Web applications that embed geo- 
graphic information systems, has integrated its product line with SQL 
Server 2008. Company executives said it had previously used SQL 
Server to store spatial data but was required to embed proprietary 
components. That limited the accessibility of Digital Map Products' 
spatial platform and corresponding data. 



PEOPLE 



_L 



Mark Palmer has been named CEO of StreamBase, which provides 
complex-event-processing software. Palmer had been the company's 
COO and president. Chris Risley, whom Palmer replaces as CEO, con- 
tinues to serve as chairman. Palmer joined StreamBase in April 2008 
and earlier worked for Progress Software as general manager of the 
Apama business unit. He also worked for YouthStream Media Net- 
works, Object Design and Digital Equipment's DECtrade. I 



Oracle putsWebLogic into grid 



< continued from page 1 

of Top Link, also dubbed llg. 

TopLink is Oracle's take on 
Java persistence. It was con- 
tributed to the Eclipse Foun- 
dation in 2006. Now, TopLink 
can deal with non-Oracle data- 
bases, including IBM's DB/2, 
Microsoft SQL Server and 
MySQL. Oracle said it will 
offer support for EclipseLink. 

Steve Harris, vice president 
of application server product 
development at Oracle, said, 
"The BE A acquisition has 
brought us a stronger Eclipse 
story than we had before, 
though Oracle was the second- 
largest committer to the Eclipse 
code base, behind IBM, even 
before the BE A acquisition. 

"Eclipse has been a very 
vibrant place for us. When we 
acquired BEA, they had a 
number of tooling offerings for 
Java EE developers. We have 
taken that [BEA Workshop for 
WebLogic] offering and pack- 
aged it up into the Oracle 
Enterprise Pack for Eclipse, 
and that really helps our tool- 
ing story for developers in 
Eclipse." 

Harris went on to detail the 
company's plans for its flag- 
ship JDeveloper development 
environment. 

"JDeveloper is our strate- 



gic, integrated, fully featured 
development environment for 
doing Java development, XML 
development, graphical devel- 
opment of business processes 
and development of SOA. It 
represents a complete and 
integrated development expe- 
rience for our end users," said 
Harris. "That's our strategic 
direction. However, Eclipse is 
a very important part for devel- 
opers and our customer base. 

"We really are committed to 
both environments moving for- 
ward. I have a team that works 
on persistence tooling, and it's 
literally working half on JDe- 
veloper-type additions and half 
on Eclipse additions." 

Finally, Oracle released two 
new industry-specific Oracle 
Application Integration Archi- 
tecture Foundation Packs; one 
for public utilities, the other for 
the insurance industry. Much of 
the time-saving associated with 
these packs is in the pre- 
designed integration points, 
aimed at connecting systems 
common to each industry. 

ORACLE HARDWARE 

CEO Larry Ellison unveiled 
the HP Oracle Exadata Pro- 
grammable Storage Server 
(EPSS), a joint effort between 
his company and Hewlett- 



Packard. The 12-drive rack- 
mount storage server includes 
a multicore CPU in each rack 
and the ability to run Oracle's 
Parallel Query Database soft- 
ware. That means developers 
can pass queries right to the 
storage grid and return only 
the data needed, rather than 
disk blocks. 

According to Ellison, the 
EPSS was created to address 
the data bandwidth problems 
experienced by modern data- 
base servers. 

"Large databases now have 
reached around 200TB," Elli- 
son said in his keynote at Ora- 
cle OpenWorld. "Those data- 
bases are tripling in size every 
two years ... The disk storage 
systems available today simply 
cannot cope with the amount 
of data that has to be moved 
off those disk drives and into 
the database servers." 

With that, Ellison announced 
immediate availability of the 
Linux version of the EPSS, with 
other versions arriving soon. He 
also announced the develop- 
ment of the HP Oracle Data- 
base Machine, a single rack of 
servers that includes 64 Intel 
processor cores and 14 EPSS 
servers. The rack can store more 
than 100TB of data and achieve 
throughputs of up to 14GB/sec.l 



STILL NO RELEASE DATE FOR FUSION APPLICATIONS 



Oracle OpenWorld is becoming an annual event 
of smoke and mirrors, at least as far as Oracle's 
Fusion Middleware and Applications are con- 
cerned. While the company touted its openness 
at the show in late September, Fusion Applica- 
tions remained hidden from view. 

When it announced Fusion Middleware in 
2005, Oracle also promised integrated 
applications designed to enhance collab- ANALYSIS 
oration through Web services. Each year ^^^^^^_ 



process, since Oracle would comment neither on 
the change nor on Fusion Applications. 

According to Internet rumors, Kurian would 
be next in line for the CEO position at Oracle 
were Fusion to succeed. But first, Oracle must 
ship its retinue of proposed Fusion Applications. 
Again, this year, the company refused to give a 

release date. 

Conversely, it is already on track to 

integrate BEA's middleware into its Fusion 



since then, the company has been unable to put 
a date on the apps' arrival. 

An analyst suggested that a management 
change is behind the delays, adding that while 
Oracle's applications are still missing, its pur- 
chase of BEA in January has rendered its mid- 
dleware foundation increasingly robust. 

Gartner's Yefim V. Natis, vice president and 
distinguished analyst, and Kimihiko lijima, vice 
president of applications research, both said 
Fusion Applications have been delayed but are 
on their way. 

Natis surmised that the lag is due to a man- 
agement shift inside the company. Late last year, 
shortly after CEO Larry Ellison had promised the 
arrival of some Fusion Applications in early 2008, 
Thomas Kurian was placed in charge of the entire 
Fusion product line. It is unclear why the shift was 
ordered or why it would have slowed down the 



stack: Oracle released a grid-ready form of 
WebLogic Server at the show. 

WebLogic is superior to Oracle's former appli- 
cation server, 0C4J, said Natis. "It's made the 
foundation stronger," he said of the Fusion stack 
since the BEA acguisition. 

Natis estimated that Oracle could finish work 
on its applications sometime in the next six 
months to a year. 

Meanwhile, Oracle showed off its new Beehive 
collaboration environment at the show. The Web- 
based workspace is designed to function as a hub 
for employee work and interactions. 

Oracle president Charles Phillips made much 
of Beehive's "from scratch" creation, and no 
mention of Fusion was made in conjunction with 
the product. Oracle's Beehive is unrelated to the 
Apache open-source project of the same name 
created by BEA. —Alex Handy 
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The Experience of Chart FX. The Innovation of Grid FX. 

Chart FX has long been considered the most tightly integrated data visualization 
solution for Visual Studio because of the great lengths taken to provide unobtrusive 
functionality within your environment. The Smart Tag Wizard exposes many 
properties within the design-time surface instead of launching external wizards. The 
Chart FX rendering engine utilizes AJAX to product fully interactive images and 
support state in web applications. Grid FX adds innovative design-time and run-time 
functionality with a myriad of developer tools such as design-time wizards, drag 
and drop grid elements (WYSIWYG), palettes and motifs (auto-include CSS), 
heirarchical API, enhanced Property Grid Editor, automatic web.config updates for 
settings, documentation and the Resource Center (dynamic samples with code). 
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Microsoft's building 



< continued from page 1 

"high priest" activity for customers, but 
VSTS' Architecture Explorer compo- 
nent will simplify the process. Modeling 
and added workflows will help partici- 
pants in agile processes track work items 
via TFS, said Mendlen. He added that 
TFS would enforce constraint-based 
modeling with "continuous integration," 
whereby code is validated against archi- 
tecture as it is being checked in. 

"If a build invalidates architectural 
policy, it will be flagged," said Skinner, 
noting that customers have told 
Microsoft there is often a disconnect 
between what developers believe the 
architecture is and what it really is. 

VSTS 2010 is a "big move back 
toward an endorsement of modeling 
for Microsoft, but in the greater 
scheme of model-driven development 
[it's] less huge," said Gartner research 
vice president Jim Duggan. He added 
that VSTS allows customers to "stay on 
Microsoft ground," whereas previously 
they have had to go to tools from com- 
panies such as Borland or IBM to han- 
dle UML modeling. 

Mendlen said Architecture Explorer 
will deliver new source control facilities, 
including branch visualization, which will 
help developers contemplate "complicat- 



ed, deep branches" and merge them back 
together. The feature is designed to help 
customers maintain multiple releases of 
software in parallel. 

Branch visualization will bring 
Microsoft's offering up to speed with 
competing products such as IBM's 
Rational ClearCase, said Chris Mene- 
gay, a principal consultant for Notion 
Solutions and a Microsoft regional direc- 
tor (a title given to volunteers recog- 
nized by Microsoft for technical exper- 
tise). "We've helped customers move off 
of ClearCase, and the one thing they 
always end up missing is the branch/ver- 
sion visualization." 

Microsoft is doing some merging of 
its own: Its database professional role 
and team developer role products, Visu- 
al Studio Team System 2008 Develop- 
ment Edition and VSTS 2008 Database 
Edition, are being pulled together into a 
unified product. 

"These were separate products and 
roles, but it is clear to us that the [data- 
base developer] is more of a hybrid 
developer," Mendlen said. 

QUALITY, NOT QUANTITY 

Microsoft also wants to pull quality into 
the process earlier, said Mendlen. He 
observed that handoffs of applications 
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Visual Studio uses modeling to validate code against architecture. 



between developers and QA profession- 
als have been inefficient, "siloed func- 
tions" and not nearly collaborative 
enough to infuse quality into software in 
a timely manner. 

One of the biggest bottlenecks in the 
process is that QA people are often 
unable to reproduce bugs, he said. 
Microsoft hopes to change that dynamic 



with new testing tools that record the 
state of the running application, all of 
the appropriate logs, and the debugging 
of that application through a suite of 
agents and collectors, said Skinner. 

It is like "TiVo for testers," Mendlen 
said, explaining that VSTS will package 
screen grabs and video for testers to dig 
into as a work item. He noted that it will 



also save testers time because they will 
no longer have to reinstall the build 
themselves. Several Microsoft partners 
already offer the capability in their tools. 

After a tester proves that a bug exists, 
he or she can hand it off back to the 
developer to dig into the "nasty details," 
Mendlen said. "This is a key scenario. 
Many times, the developer would 
already have moved on to version 2.0. 
Instead of shelving their work, they can 
now dig into it [the bug report] and 
move in." 

Check-in requirements, such as unit 
tests to be run or test scripts to be creat- 
ed, will help deal with the problem of 
developers' not running necessary tests, 
Forrester senior analyst Jeffrey Ham- 
mond wrote in an e-mail. 

Developers who want to test hetero- 
geneous composite applications are out 
of luck: VSTS only provides visibility 
into .NET applications. Customers will 
be required to purchase additional tool- 
ing from Microsoft partners to test Java 
applications. 

Quipped Gartner analyst Jim Duggan: 
"Doesn't everyone define heterogeneous 
as all versions of Windows? This is a 
weakness in a number of places in their 
[Microsoft's] story. They are hoping that 
TeamPrise [a third-party product] will be 



good enough for clients, but it is a tilt that 
hurts them in general shops." 

Microsoft is also hoping to push testing 
back earlier into the software develop- 
ment life cycle with a new impact analysis 
feature that interrogates source code and 
assigns test suites to code before it is 
checked in. It is a timesaving mechanism 
that runs the tests that absolutely need to 
be run, explained Skinner. 

It is not being designated a best prac- 
tice, however, and is intended more for 
time-crunched developers. "If you can 
run all of tests, do it," said Mendlen. 
"More-focused, quicker testing means 
catching more bugs." VSTS will include 
test-planning tools that capture manual 
tests, Mendlen said, noting that most 
testing is performed manually. 

Microsoft has nothing to announce 
regarding the integration of its Security 
Development Lifecycle, he said when 
asked about whether security vulnerabil- 
ities would be treated as defects in 
VSTS. Microsoft recently introduced a 
threat-modeling tool that integrates with 
Visual Studio. 

Software Assurance customers that 
own either Visual Studio Team System 
2008 Development Edition or VSTS 
2008 Database Edition will receive the 
other product free. I 
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Developing rich Internet apps with Flex isn't a stretch for 



< continued from page 1 

complex Web applications with 
relative ease. For developers 
with a background in Java, he 
said, Flex's ActionScript script- 
ing language is easy to under- 



stand. And the facility with 
which Flex enables 3D imag- 
ing — critical for Owen's appli- 
cation — sealed the deal. 

Owen's project was Discovery 
Earth Live, a Discovery Channel 



online interactive feature that 
tracks global climate data. The 
Discovery Channel gathers 
information for the application 
from the National Aeronautics 
and Space Administration and 



the National Oceanic and 
Atmospheric Administration. 
Discovery Earth Live displays a 
3D view of Earth that can be 
"spun" to play video on climate 
trends in a user-selected region. 



Your best source for 
software development tools! 



program merfs 

r a paradise 



■**. 



Paradise # 
L05 01101A02 



$ 800, 



99 



LEADTOOLS Imaging Pro 

by LEAD Technologies 

Load, save and convert 1 50+ image formats 
including TIFF, EXIF and PDF, supporting many 
compressions. Acquire images from TWAIN or 
32/64bit WIA devices. Apply transforms, color 
space conversions and 200+ region aware 
image processing routines. Also includes high 
level display controls, thumbnail browser, pan 
window and imaging common dialogs. 
•.NET, API, C++ Class Libraries &WPF 
•AJAX and ASP.Net Web Form Controls 
•COMInteropwrapperfor.NET 
• Royalty Free 

programmers.com/lead 




j dtSearch Engine for Win & .NET 

| Add dtSearch's "blazing speeds" 
(CRN Test Center) searching and 
| file format support 

• dozens of full-text and fielded 
data search options 

• file parsers/converters for hit-highlighted 
display of all popular file types 

» Spider supports dynamic and static web data; 
highlights hits with links, images, etc. intact 

• API supports .NET, C++, Java, SQL and more; 
new .NET Spider API 




I&5S33. 



"Bottom line: dtSearch manages a terabyte of 
text in a single index and returns results in 
less than a second. " — InfoWorli 
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"The focal point of this appli- 
cation is the 3D globe and being 
able to put really rich data onto 
the globe," Owen said. "3D inter- 
faces are really difficult to devel- 
op in AJAX right now; without an 
embedded player, it's difficult 
to render 3D. And Silverlight 
doesn't have nearly a mature 
enough code base to build some- 
thing this complex. They're going 
to be seeing some pretty basic 
RIAs for probably the next year." 

By contrast, Owen said, there 
is a community of Flex and Flash 
developers who are already 
building 3D frameworks with 
ActionScript. Access to those 
frameworks smoothed the path 
for EffectiveUI's project. 

EASY INSTALLS 

According to Sandy Scott, princi- 
pal software engineer at 
Marathon Technologies, Flex 
has an advantage over other RIA 
platforms in ease of installation 
for end users. Marathon, a Lit- 
tleton, Mass., provider of disas- 
ter recovery software for physical 
and virtual servers, tapped Flex 
to build a management console 
for server virtualization that inte- 
grates with the Citrix XenServer. 

Previous consoles had been 
Java-based, and installing Java 
Runtime had proved to be a nui- 
sance for some users because it's 
a big installation package, Scott 
said. Flash players, by contrast, 
are already "near ubiquitous." 

"Our familiarity with Java was 
probably a little behind the times 
because we were using Java 
Swing," Scott said. "The look and 
feel we saw out of the box with 
the Flash and Flex components 
made it seem like we were get- 
ting there faster than we would 
have if we went back to Java." 

Silverlight, for its part, is 
newer than Flex and thus lacks 
the latter's broad user and 
knowledge base, and Marathon 
didn't want to commit to a 
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many teams 

Microsoft platform, Scott said. 

Kasem Abotel, senior man- 
ager of development with SAP's 
Business Objects unit, said Flex 
was SAP's RIA platform of 
choice for development of its 
Spend Analytics application, 
which lets companies analyze 
their expenditures. Abotel said 
Flex is easy to prototype and 
provides strong debugging 
capabilities via its Eclipse-based 
IDE. The platform also makes it 
easy for developers to use Web 
and HTTP services and skins. 

A "big win" for Flex, Abotel 
said, is its data binding feature, 
whereby developers declare a 
data source for a table, and the 
data is automatically tabulated 
and kept up to date. It also pro- 
vides flexibility within compila- 
tion options, he said. 

WISH LISTS 

While Flex suited the Discovery 
Channel application, the devel- 
opment wasn't a walk in the park, 
said EffectiveUI's Owen. The 
hardest part was figuring out how 
to make 2D video perform well 
in a 3D environment, since the 
application wraps interactive 
video around the globe. The 
developers had to figure out ways 
to cache video on user machines 
so that Flash would not have to 
decompress the video frame by 
frame, Owen said. 

As for the process of writing 
Flex code, Owen said he would 
like to see some complexity 
stripped out and more code con- 
ventions added. "Personally, I've 
gotten to the point in my pro- 
gramming career where I prefer 
languages that allow a lot of con- 
ventions over configuration — 
languages that are really dynam- 
ic and enforce some structure 
on your code but enable you to 
write less code." 

He cited Ruby on Rails as an 
example. "I've had a lot of fun 
learning Ruby on Rails, and I'd 
like to see Flex move in that 
direction. I don't think it's going 
to [do so], and it's not that big a 
deal, but I like being able to 
write less code and achieve the 
same results. 

"After you've been doing 
this for five to eight years, you 
get to the point where you don't 
want to have to write all the 
tedious details anymore. If you 
can think about it, you want to 
be able to write one or two lines 
of code to get your thought into 
reality so you can focus on big- 



ger and more interesting prob- 
lems. I wish Flex would just 
take care of more of that stuff 
for me and abstract away some 
of the principles I'm sick of 
enforcing myself." 

Abotel said his team at SAP 
found it difficult "learning how to 
implement accessibility for our 
products" with Flex. He would 



like to see Adobe "focus on out- 
of-the-box support of accessibili- 
ty" to improve the platform. 

Abotel also said builds can 
pose a problem. An empty Flex 
app produces an SWF file rough- 
ly 150KB in size, the majority of 
it due to Flex framework code. 
"Flex applications may be slow to 
load initially because of the size 



of the SWF files," he said. "How- 
ever, Flex applications allow for 
client-side processing that can 
provide superior interactivity on 
subsequent interactions by re- 
ducing server round trips." 

Marathon, for its part, 
encountered a few user interface 
bugs when porting its virtualiza- 
tion application from version 2 of 



Flex to version 3, but the bugs 
were resolved quickly, Scott said. 
Prior knowledge of Java is 
helpful for understanding Flex 
and its language because there 
are similarities in their syntax 
and object-oriented character- 
istics, said EffectiveUI's Owen. 
He said he learned Action- 
Script in about two weeks. I 
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a Tom Rizzo, 
Director of Microsoft 
SharePoint, said: 
"The phenomenal uptake 
of Microsoft Office 
SharePoint Server is 
transforming organizations 
of all sizes, all industries and all geographies. 
Business leaders are envisioning new uses 
of SharePoint, and IT professionals and 
developers are gearing up to implement new 
applications as well as integrate SharePoint 
to other enterprise software. This is creating 
significant demand for training and education. 
We're delighted BZ Media is introducing this 
new SharePoint technical conference." 
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Bridge the divide from spoken language of requirements to programming language of specs 
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"If our designs are 

failing due to the constant 

rain of changing requirements, 

it is our designs that are at fault. 

We must somehow find a way 

to make our designs resilient to 

such changes and protect 

them from rotting." 

— Robert. G. Martin, 
founder of Object Mentor 



equirements and specifications are essential elements of any project 
that involves software development and testing. But they spring 
from very different worlds, and every time a customer approaches a 
developer for an application, those realms are poised to collide. 

Requirements "define necessary objectives" on the part of the end 
user, according to technical essayist Derek Sisson (philosophe.com). 
They state what the program is supposed to do — critical informa- 
tion for developers and testers. 

Author Cem Kaner wrote in "Testing Computer Software" 
that "a requirement is an objective that must be met. Planners cast most requirements in 
functional terms, leaving design and implementation details to the developers." 

The requirements world is a fluid, somewhat fuzzy space where users knows what they 
want but struggle to express it clearly enough for developers and testers to produce applica- 
tions that meet the users' needs. Contrast that with the rigidly structured world of specifica- 
tions, whose inhabitants converse in tech speak, execute tasks in narrowly defined ways and 
deal in specialized knowledge that outsiders find difficult to grasp. 

"Specifications provide formalization and detail around a specific requirement," observed 
Bola Rotibi, an analyst with MWD Advisors. But important details can be lost in translation 
from the customers concept to the developers spec. 

"The customer doesn't know all the technology required; they just have a need, which they 
express in the language you and I communicate in," Rotibi said. Because the customer 
doesn't know all the technical aspects of creating an application that meets the need, require- 
ments are often "too loose and vague," she said. "But continued on page 24 ► 
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Requirements to specs: Bridge 



< continued from page 23 

there are a lot of conditional 
Boolean expressions that need to 
be met should something fail." 

Globalization complicates 
the process. "Words are impre- 



cise, especially from an engi- among native English speakers, 



neering perspective," said 
Wayne Horn, CTO of Augmen- 
tum, a contract software devel- 
opment provider with offices in 
California and China. "Even 



different people can interpret 
the same set of words in differ- 
ent ways. Expand this to a glob- 
al scope of international English, 
and the problems are worse." 



Users and developers think 
differently, Horn said, and the 
level of detailed thought 
required to develop software is 
"quite daunting" to most users. 

Users sometimes neglect to 




tell developers about "nonfunc- 
tional requirements," said Mark 
Eshelby, director of product 
management at software giant 
Compuware. An example is 
"performance at peak usage 
times; people forget to state this 
up front. Then development 
goes down a path not knowing a 
key need: The app must scale 
for thousands of users." 

Bj Rollison, testing architect 
for Microsoft, said the problem 
boils down to design. "I think 
[there's a difference] between 
what the customer wanted and 
what they actually get — basically 
fundamental design flaws," Rol- 
lison said. "I suspect this prob- 
lem exists for a variety of reasons, 
but one leading cause may be 
that many companies overload 
developers and testers with the 
added responsibility — and bur- 
den — of pretending to under- 
stand the customers needs as 
well as the marketing people or 
program managers [do]. 

"To paraphrase Bill Gates, it 
is important for testers and 
developers to have exposure to 
customers, but it should be dif- 
ferent from the program man- 
ager's exposure." 

INTO THE BREACH 

The gaps in communication 
and understanding can result in 
frustration on both sides of the 
fence. Users get frustrated 
because their requirements are 
not being met, or the require- 
ments they communicated real- 
ly aren't the requirements, or 
the act of meeting the require- 
ments produced unexpected 
and unpleasant side effects. 
User dissatisfaction in turn 
lengthens the development 
cycle and raises costs, since 
developers have to write and 
rewrite code, and testers have 
to scrap test specifications and 
start from scratch to comply 
with a moving target. 

So how can developers and 
customers bridge the divide 
between requirements and 
specifications? It takes open 
communication, sharing of 
information and plain old 
accountability. "If a customer 
says, T would like to do X,' that's 
fine, as long as they are aware 
of the potential risks and what 
needs to be in place," said 
MWD's Rotibi. 

Rollison said Microsoft relies 
on program managers to trans- 
late customer needs into rea- 
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the language gap 

sonably unambiguous require- charter that outlines everyone's them for version 2.0. Don't let 



ments and to build prototypes 
early in the design phase. 

"Relying on developers to de- 
sign a software program would 
be similar to relying on an engine 
mechanic to design a car," Rolli- 
son said. "Engine mechanics 
could probably design a car with 
some really cool bells and whis- 
tles, but the only truly satisfied 
customers would be other 
engine mechanics." 

Testers shouldn't be expect- 
ed to identify design problems 
after implementation, either. 
"Too costly," Rollison said. "It is 
probably similar to a sculptor 
casting a bronze statue of a man 
and then realizing that pieces 
are missing and there are too 
many fingers and the facial fea- 
tures resemble those of a 
woman. The sculptor can braze 
on the extra pieces, cut off the 
excess fingers and possibly 
reshape the facial features with 
a hammer. But in the end, you 
have weaknesses in the casting, 
and the ultimate result is really 
not what was intended." 

Imad Mouline, CTO of Web 
performance-monitoring solu- 
tions provider Gomez, said the 
definitions are changing for 
those who work with specifica- 
tions and requirements. "The 
application is no longer what 
the software developer puts 
together in the lab; the applica- 
tion is what the user sees. And 
what the user sees and what the 
developer does are two very dif- 
ferent things." 

HEADS IN THE CLOUD 

The move to cloud computing 
is driving end users' expecta- 
tions to new highs, Mouline 
said. "Know your customer and 
what your user is going to see. 
Look at the application from 
the outside as early in the cycle 
as possible. Things perform dif- 
ferently with client-side pro- 
cessing; are you taking that into 
account when doing perfor- 
mance testing? The response 
time of an application is influ- 
enced more by the client-side 
rendering time than by the net- 
work or server." 

Thomas Christel, vice presi- 
dent of marketing at Yooplus, a 
developer of Web 2.0 platforms 
for enterprise social network- 
ing, advises appointing a project 
leader for each project to bridge 
the gap between requirements 
and specs. "Create a project 



roles and responsibilities. Pay 
close attention to scope and 
scope creep. Yes, you will obtain 
new ideas, features and func- 
tions along the way, but capture 



your project grow on its own." 

To increase customer satis- 
faction, many developers are 
moving to agile software devel- 
opment methodologies. Agile's 



manifesto states that it values 
responding to change over fol- 
lowing a plan and that develop- 
ers should welcome changing 
requirements, even late in the 
development cycle. Agile devel- 
opment counts on iterative pro- 
duction that delivers working 
software frequently. 

"We need to develop agile 



systems that have some ability to 
deal with change," said Ron 
Schmelzer, senior analyst at Zap- 
Think. "If you design a system so 
rigid that you have to get it right 
the first time, it's guaranteed to 
fail. Developers would much 
rather the requirements be well 
defined and not change. It would 
continued on page 26 ► 
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User/developer divide 



< continued from page 25 

make life so much easier. But that's just 
not the reality. 

"The best way to act is incrementally 
meaning that you design bits; you don't 
design a huge system. You plan to go back 
and revise the things you've designed, in 
an agile way to reduce the penalty of 
being wrong. The cost of each change has 
to be low. We have to be judicious. The 
dollars we spend can't just be pay and 
pray' We have to be cost-justified in this 
environment." 

In the case of agile 
development, focus- 
ing early on mis- 



you show it to them. 

— Programmer's proverb 



on 
matches between 
requirements and 
specifications is a 
good thing, said Aug- 
mentum's Horn. "Accept 
that development is iterative 
As development proceeds, it is impera- 
tive to have fairly frequent software 
builds for users to validate that progress is 
happening as expected. One reason is to 
enhance confidence. But also, there is 
benefit to finding any misinterpretations 
or implementation deviations in smaller 
chunks, so the corrections are manage- 
able, instead of at the end, in the 'big 
bang,' final user acceptance release." 



"Users don't know 
what they want until 



For Horn, simulation is the way to 
bridge the gap between requirements 
and specifications. "If you look at most 
development, requirements are viewed 
as an input into the development 
process. What we need to do is simulate, 
as early as possible, the software experi- 
ence for the users." 

That "virtual reality" experience of the 
software before it is ready, Horn said, lets 
users refine their conceptualization of 
requirements and provide feedback to 
QA so that all the "bad news is 
vetted out early." Making 
the user experience 
the driving process 
of software develop- 
ment rather than a 
support process is 
the key to creating the 
simulations quickly and 
cost-effectively he said. 

"One can quickly simu- 
late the software experience 
by capturing a definition of user profiles, 
constructing user-perspective use cases, 
constructing paper-and-pencil-based 
prototypes of those use cases, and pre- 
senting a storyboard animation of those 
use cases to let users quickly see what the 
software would look like and feel like," 
Horn said. "There is even an area of 



tools focus now called re- 
quirements definition; 
[these tools] visually de- 
fine the simulation. While 
tools are nice for more polished 
simulations, the real value is the 
change in mindset for the development 
process framework, to be focused on 
user [perceptions] as the driving factor." 

Horn said that with simulation use 
cases, the customer can now participate 
in the software creation process. "The 
software system can be user validated 
and accepted before any software is ever 
created. And doing it early in the 
process takes the place of the unpleasant 
discussion at the user acceptance test 
that usually goes something like this: 
User: This feature isn't working the way 
I thought it would when I wrote the 
requirements.' Developer: 'But we don't 
have any time left in the schedule to 
make any changes, and the architecture 
doesn't support that.' " 

Compuware's Eshelby also recom- 
mends a collaborative environment. 
"You do this by helping everyone to sing 
from the same sheet," he said. "You're not 
asking QA to weigh in and say, T don't 
think the button should be here,' but 
you're giving them an opportunity to say, 
'Did you think through all the details?' If 



"No part of the delivery 

process is as critical, nor as 

difficult — because requirements 

map the human world to the 

technological world." 






— Jim Highsmith, founding member 
of the Agile Alliance 






QA is 
a part of the com- 
munication beforehand, 
they can help figure that out." 

Bringing in QA at the beginning of 
the project also lets the team get a jump 
on testing. "They now have extra time to 
generate test plans for validating the 
requirements," Eshelby said, so that 
tests are ready and available earlier in 
the development life cycle. 

Yooplus' Christel echoed the senti- 
ment on teamwork. "Include your cus- 
tomer in the entire process, including 
requirements gathering, focus groups 
and beta testing. Include your IT project 
manager. Create an open collaboration, 
with project transparency." 

Using a social enterprise platform 
with shared calendars and files, mile- 
stones, and project blogs and wikis can 
make collaboration easier, Christel said. I 

Technology writer Tina Gasperson 
focuses on enterprise software and appli- 
cations development. Read her blog at 
www. gasperson.com. 
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FROM THE EDITORS 

Microsoft's right on VSTS 

Critics jumped on the weaknesses in the first version of Visual Studio 
Team System. While the role-based development suite paid lip ser- 
vice to architects, coders and testers, Microsoft did not present a com- 
plete application life-cycle management solution. There were many 
holes in VSTS, many of which were filled in by talented third-party 
developers. It was a win-win solution: Microsoft developers got better 
tools, and some tool companies made a good living. 

With the announcement of VSTS 2010, Microsoft is filling in some of 
the holes itself. When the release ships in a couple of years (more or less, 
after innumerable betas and community technology previews), it will 
include stronger tools for modeling, source control, testing and require- 
ments management. 

Third-party developers will undoubtedly squawk as Microsoft usurps 
"their" turf, but this is how the world works. Microsoft is right to con- 
tinue enhancing the platform, providing greater value and better tools 
for developers. And while it's certain that VSTS 2010 will obsolete some 
add-ons sold for the current version of Team System, the next-generation 
platform will create new opportunities for add-on providers. 

In today's increasingly complex software development world, it's 
important that all development teams — all development teams — have 
access to critical ALM functionality at a good price. In adding better 
ALM features to VSTS 2010, Microsoft isn't undercutting its partners. 
Instead, it's supporting its customers. That's the right thing to do. 

That leaves just one big question: When? Microsoft's plans for VSTS 
2010 and .NET Framework 4.0 are ambitious, and if we've learned any- 
thing lately, it's that Microsoft can't hit a development target. The com- 
pany was wise to not commit to a release date; even if it did, we'd be 
skeptical. 

Indeed, that is the great irony: The company that sells tools and rec- 
ommended methodologies to help its customers deliver software on time 
and on budget can't seem to do so itself. I 

OSGi, Equinox p2 livin' the dream 

It's a nice dream: build your code from Lego-like chunks of existing 
libraries, then use and reuse. You've heard it a hundred times. But 
while component-based development has been highly successful in some 
areas, such as Windows development, it hasn't made headway in others, 
such as Java-based servers. 

Indeed, this promised nirvana has so often proved out of reach that 
skeptics would be justified in ignoring new component-based initiatives, 
says Jeff McAffer, co-lead of the Eclipse Foundation's Equinox project. 
When he tells old-timers about the OSGi vision of component-based 
construction, they often roll their eyes and tell him that this is the third 
or fourth time in their career they've heard such a claim. 

Don't scoff this time. The OSGi team seems to be putting its money 
where its mouth is when it comes to component-based development. At 
the heart of the claim is rigid dedication to the principle of write once, 
run anywhere. With OSGi now appearing on mobile devices and desk- 
tops, in addition to application servers and RCP applications, progress is 
being made toward realizing Java's full promise. With OSGi on a phone 
and application server, the same application bundle can be run on both; 
not so for Java EE and Java ME. 

That, of course, is a good thing, and we're anxious to see the Eclipse 
Foundation and its legions of OSGi supporters and developers con- 
tinue down this path. If they can maintain such compatibility above all, 
then the possibility of component-based design and development is that 
much more real. And thanks to the Equinox p2 project, all those potential 
components already have their own management and provisioning system. 

OSGi's technologies may be tough to understand and to explain, but 
the group is shaping up to be a bright spot of innovation in the Java uni- 
verse. Maybe it's time for Java-based components to succeed. I 



Want to write a little language? 



Writing and implementing a lan- 
guage are nothing new to many 
computer geeks. University comp-sci 
curricula regularly require designing 
and implementing a toy language (com- 
plete with compiler and, these days, a 
virtual machine). 

This exercise often gives program- 
mers a bug to write and implement their 
own language. The fantasy 
often fades, however, dimin- 
ished by the complexity of the 
task; the low likelihood that 
the resultant language would 
find adoption beyond the 
developer and a few acquain- 
tances; and, most important, 
the fact that, aside from a nar- 
row set of personal needs, 
new languages tend to mimic 
existing, established ones. 

Industry and commerce, however, 
are a different world altogether. Most 
large software packages need some kind 
of little language, or domain-specific 
language (DSL), to be used for com- 
mands, macros and scripting. Regret- 
tably, many DSLs today are designed to 
use XML syntax in order to facilitate the 
language parsing. Use of a data inter- 
change format as the defining grammar 
makes many human-oriented DSLs, 
such as Ant's syntax, very unpleasant. 

Good DSLs are naturally expressive; 
their language reflects the problem 
domain they address. Once such a lan- 
guage is learned, it is easy to remember. 
A good example is the data and text 
manipulation language awk. Its syntax is 
so simple that you can return to it years 
after you last looked at it and be produc- 
tive in a few minutes. Of course, awk's 
advanced capabilities involve a larger, 
fuller syntax, but even that retains a 
remarkable ease of use. 

Designing good DSLs or full, expres- 
sive languages is no easy job. And yet, it 
is the design stage that frequently will 
determine a language's appeal. For 
example, a substantial part of Ruby's 
attraction is what users describe as its 
intuitive syntax, pleasant expressiveness 
and brevity. (Compare those sentiments 
with your experience writing Ant files.) 

Good language design is little taught 
and rarely discussed. It remains tucked 
away, the seeming province of a cabal of 
specialists who toss around terms such 
as "monads" and "lambda calculus." In 
truth, however, it is not so rarefied a 
skill — and it's one from which almost all 
large IT organizations can benefit, since 
nearly all such organizations have com- 
plex programmable apps in house that 

CORRECTION: 

Jacob Lehrbaum's name was misspelled 
in the Oct. 1 special report. Lehrbaum 
is senior product line manager for 
JavaFX at Sun. 
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represent part of the company's compet- 
itive advantage. Writing a good language 
can be a huge contribution to getting 
things done better, faster, cheaper. 

There are several landmark books 
that can help a novice language designer 
do the job right. They're all textbooks, 
but they do offer a deep understanding 
of the features that languages can 
have — in essence, providing 
the designer with a palette of 
many colors. 

Two of the books are 
established classics: R.D. 
Tennet's "Principles of Pro- 
gramming Languages" and 
Michael Scott's "Program- 
ming Language Pragmatics." 
While the former work was 
published in 1981, its content 
is still highly relevant, and it is 
frequently cited in today's discussions of 
the implementation of Java closures. 
The latter book focuses on pragmatics, 
which are the implementation aspects of 
a language. (The three principal phases 
of language implementation are syntax, 
semantics and pragmatics.) It discusses 
such topics as data type selection, object 
lifetimes and parameter processing. 

Together, the two books cover the 
basics that good designers and imple- 
menters need. Tennet's book, however, 
is a slim volume that does not cover all 
modern concepts. 

To update the area completely, 
there's the just-released "Design Con- 
cepts in Programming Languages," by F. 
Turbak and D. Gifford. The book is 
comprehensive (at 1,300-plus pages) 
and presents numerous little languages 
to illustrate key concepts. One caveat: 
The material is dense and relies heavily 
on mathematical explanations, formal 
logic and Lisp-like language examples; 
in other words, it has a strongly academ- 
ic feel. That will be intimidating to some 
readers, but the remarkably lucid style 
compensates well. And unlike the two 
other books, this one is so comprehen- 
sive as to be usable as an encyclopedic 
resource. Readers who use it as a refer- 
ence volume can skip the math and sym- 
bols without much loss. 

If you're thinking of designing a lan- 
guage — large or small — spend extra 
time working on the design. You'll 
attract more users, and they'll be hap- 
pier for the help you give them. If your 
view of what features a language 
should have are limited to the pro- 
gramming languages you've used, then 
start with Tennet's book, follow up with 
Scott's, and use Turbak and Gifford for 
updates. You'll be pleased with the 
results. I 

Andrew Binstock is the principal analyst 
at Pacific Data Works. Read his hlog at 
hinstock.hlogspot. com. 
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Java + multicore = good news 



AvikSengupta 




Dual-core processors are ubiquitous 
in desktop computers and laptops 
today; four to eight cores are common in 
servers; and within the lifetime of the 
next version of the JDK (Java 7), we are 
likely to see servers with dozens of cores 
become available in bulk. 

Moore's Law has given us unimagin- 
able increases in computing power for 
more than a generation. But a 
few years ago — as CPU ther- 
mal densities approached that 
of a small furnace — the strate- 
gy of cramming ever smaller 
transistors on chips that run at 
ever increasing frequencies 
seemed destined to hit a wall. 

So chip designers pulled a 
new trick out of their sleeves: 
They leveraged the increasing 
transistor densities to fit more 
"cores" onto a single chip. While Moore's 
Law continues to fit more transistors on 
chip, it is no longer a given that each new 
generation of CPUs will automatically 
run our existing algorithms faster. 

It is now up to us to ensure that our 
code is ready to take advantage of the 
new generation of multicore CPUs. Our 
current theory, algorithms, languages and 
tools have all evolved around the sequen- 
tial paradigm. The move to a truly paral- 
lel world will be a fundamental shift. 

At first glance, the task of paralleliz- 
ing our applications looks no different 
from multithreaded programming. The 
Java language is widely praised for hav- 
ing a simple yet powerful threading 
model that makes writing effective mul- 
tithreaded applications mainstream. It 
may therefore seem likely that the ease 
of writing multithreaded applications 
will enable us to surmount the challenge 
of writing multicore applications, but in 
practice it may not be so easy. 

The canonical multithreaded applica- 
tion in Java (such as the Web or applica- 
tion server) processes multiple users or 
connections concurrently, in multiple 
threads. That architecture is not only well 
understood; it is also very well supported 
by underlying frameworks, whether Web 
or application servers, to the extent that 
the average programmer hardly has to 
think about this issue. The complex tasks 
for thread pooling and scheduling are 
efficiently handled, and effectively hid- 
den, by the framework. All we need to do 
as application programmers is write out 
servlet or Enterprise JavaBeans on the 
correct template, and we're good to go. 

In this paradigm, the processing for 
each individual user/connection occurs 
sequentially. That works very well for 
certain tasks, and therefore Web pro- 
gramming will be able to leverage such 
processors more effectively. But since 
multicore will be ubiquitous, from the 
smallest processors upward, and will 
scale up to hundreds or even thousands 



of cores in a server, we will have to code 
our algorithms actively to convert them 
from sequential to parallel ones in order 
to ensure effective utilization of the 
processor. 

Parallelizing an algorithm, however, 
will soon run into Amdahl's Law, which 
states that the speedup from parallelizing 
a process is an inverse function of the por- 
tion of the process that is nec- 
essarily sequential. Thus, not 
only do we need good algo- 
rithms to minimize the se- 
quential portion of a process, 
but there is an upper bound to 
the speedup we can achieve, 
even with an infinite number 
of parallel processors. 
Bf^ While that may be a 
yflB depressing result, parallel 
iliUi processing has been rescued 
by Gustafson's Law, which states that 
while the speedup for a fixed-size process 
is indeed limited by Amdahl's Law, we 
can achieve nearly linear speedups if we 
consider the amount of processing that 
can be done in a fixed period. 

The next challenge in writing such 
programs will be in the area of correct- 
ness and testing. When multiple process- 
es execute simultaneously on multiple 
processors (as opposed to the scheduling 
of threads on a single processor), deter- 
minism goes out the window with respect 
to race conditions. How to test programs 
that behave correctly when run 1,000 
times but hit a race condition when run 
for the 1,001st time is a question that has 
touched anyone who has programmed on 
a multiprocessor box. As the number of 
independently executing processes or 
threads rises with large multicore proces- 
sors, the probability of hitting strange 
race conditions increases exponentially. 

Help may be available in the form of 
static code analyzers or in the use of 
frameworks that guarantee certain con- 
currency primitives. 

Our discussion of parallel computa- 
tion thus far might apply to applications 
running in distributed fashion on clusters 
of machines. In fact, it is likely that large- 
scale computing will run in a mixed mul- 
ticore/multiserver environment. And 
while those paradigms have many similar 
issues relating to parallelizing algorithms, 
they have very different latency and 
bandwidth characteristics. Therefore, it 
may not be easy to manage distributed 
algorithms optimally in hybrid systems 
consisting of clusters of computers run- 
ning multicore processors. 

The ideal support for multicore pro- 
gramming would be a parallelizing com- 
pile — one that takes a piece of sequen- 
tial code, analyzes it for parallelism and 
then writes out code that is executed in 
parallel. While a lot of research has been 
done in this area, there is no general- 
purpose tool that works for all kinds of 



computing tasks, yet guarantees high 
efficiency and correctness. The Holy 
Grail remains far out of reach. 

So while programmers still have to 
convert their algorithms manually to dis- 
tributed ones, it would be of immense 
help to base those algorithms on well- 
known, and well-implemented, concur- 
rency primitives. One such primitive is 
the Java fork/join framework, created by 
Doug Lea under the auspices of the 
JSR166 expert group. 

Described as a multicore-friendly, 
lightweight parallel framework, fork/join 
recursively splits a task into smaller sub- 
tasks; forks the sub tasks into separate 
processes or threads, so that they run in 
parallel on multiple cores; and joins all 
sub tasks to compose a result to return. 
Expected to be part of Java 7, it will ease 
the writing of parallel programs in Java. 

The code listing shown here demon- 
strates a simple parallel algorithm to 
compute the Fibonacci numbers. On a 
two-core machine, it achieves a nearly 
twofold speedup over an equivalent 
sequential algorithm: 

import jsr166y.forkjoin.*; 

class Fib extends RecursiveTask<lnteger> { 
static final int threshold = 10; 
volatile int number; 
Fib(int n) { number = n;} 
public Integer compute (){ 
int n = number; 
if (n <= threshold) 

return sequentialFib(n); 
else { 

Fib f1 = new Fib(n - 1); 
fl.forkO; 

Fib f2 = new Fib(n - 2); 
return f2.forkJoin() + f1.join(); 
} 
} 

public static void main(String[] args) { 
try { 

int groupSize = 2; // number of CPUs 
ForkJoinPool group = 

new ForkJoinPool(groupSize); 
Fib f = new Fib(40); 
Integer result =group.invoke(f); 
System.out.printlnC'Fibonacci Number: 
" + result); 

} 

catch (Exception ex) {} 
} 

int sequentialFib(int n){ 
if (n <= 1) return n; 

else return sequentialFib(n-l) + sequential- 
Fib(n-2); 
} 
} 

The program strives to describe the 
algorithm based on the fork/join primi- 
tives; the details of threading and sched- 
uling are hidden by the framework. Also, 
the program moves to sequential com- 
putation for problems below a certain 
size. Such tuning is usually required to 
produce optimal efficiency from distrib- 
uted algorithms. 

Creating successful and innovative 
solutions in the multicore environment 
requires our awareness of the attendant 
issues, as well as the tools and technolo- 
gies that help us navigate them. I 

Avik Sengupta is a director at Lab49, a 
provider of advanced technology applica- 
tions for the financial services industry. 
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Best of times for SOA architects 



Times may be bad, but for those who 
"get" SOA, there are opportunities 
out there. Indeed, if you're a qualified 
SOA architect, you're in high demand 
now, according to just-published data. 

As TechTarget's Rich Seeley recently 
reported, David Foote, co-founder, CEO 
and chief research officer for Foote Part- 
ners, thinks that those who understand 
SOA and can apply it within an enter- 
prise should not have a problem finding 
a high-paying job. Foote s firm tracks the 
demand for specific SOA certifications, 
which he describes as ranging from 
beginner and intermediate levels to the 
"guru, master-level architect." People 
who just plain grasp SOA and can be pro- 
ductive with the concepts within the con- 
text of a business are also in demand. 

Foote doesn't have to sell me; I've 
been getting a call a week from a head- 
hunter looking for good SOA architects. 
Moreover, I've been watching Dice.com, 
where the number of openings for SOA 
has increased tenfold in the past six 
months. Typically, it's consulting firms 
and the Forbes Global 2000 that are 
looking for SOA talent, but I'm also see- 
ing searches by government agencies 
and nonprofits. 

Meanwhile, the demand for training 



is huge. Analysts at ZapThink recently 
told me their SOA architect certification 
business is way up. I'm sure the other 
training organizations are experiencing 
similar growth. Interest in SOA content 
is climbing as well; for my part, I've seen 
much higher hit rates of late for my 
blogs and podcasts. 

Could SOA be booming 
during an economic down- 
turn? That seems to be the 
case. But the boom is being 
driven more by those looking 
for people than by technology. 

So why is demand soaring 
for high-priced SOA talent? 
It's really a matter of market 
maturation. 

The initial interest in SOA 
was around innovative early 
adopters who were well-read, did inter- 
nal presentations and went to confer- 
ences, but really did not do much around 
true architecture. Then mainstream IT 
picked up on SOA and dipped in a toe, 
experimenting with SOA concepts by 
applying them in funded projects. 

Now, there are fully funded, large- 
scale projects that require SOA talent, 
which is still lacking in many organiza- 
tions. Business is getting serious about 




SOA, and the demand for SOA architects 
exceeds the supply. "Most companies we 
talk to have architects, but they need five 
times as many," Foote told Seeley. 

The challenge is to find SOA archi- 
tects who are actually SOA architects. I 
see and hear a lot of people out there 
who talk a good game but don't really 
understand the first thing 
about applying the core con- 
cepts of SOA. Thus, my fear 
is that in their rush to find 
SOA talent, many organiza- 
tions may find that they hired 
architects who have led them 
down the wrong path by lean- 
ing too much on technology 
or, worse, by "managing by 
magazine" — in other words, 
chasing the hype, not the 
needs of the business. 

Good SOA architects typically: 

• Can speak the language of busi- 
ness and IT. They understand the core 
needs of the business and leverage the 
correct technology solutions to meet 
those needs. 

• Understand how to work with 
complex technologies in challenging 
environments. SOA brings systemic 
change, and that means dealing with 



distributed architectures that affect peo- 
ple and organizations. 

• Can drive toward a strategy 

through effective tactical implementa- 
tions. It's one thing to complete a proj- 
ect, but SOA is about architecture. 
Thus, you should have a strategy in mind 
as you move from project to project. 

• Are experts in the available SOA 
technologies and in SOA best prac- 
tices. Implementing SOA requires adop- 
tion of a process that's built around the 
needs of the business. When you get to 
the technology selection phase, you 
need to work with many technological- 
solution patterns (for example, enter- 
prise service buses, or ESBs) and tech- 
nology that works within those patterns, 
such as a particular ESB. Just under- 
standing what's out there and how it 
works is a huge job in itself. 

• Can work effectively with the 
resources they are given. Times are still 
tough, and you'll find that there are no 
unlimited budgets out there. Good SOA 
architects can make do with the tools they 
have, achieving success by using the pro- 
vided resources as effectively as possible. 

Good luck to those looking for SOA 
architects — and to those SOA architects 
looking for jobs. Here's hoping you find 
the right match. I 

Reach analyst David S. Linthicum at 
david@linthicumgroup. com. 
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Microsoft's Next Big Thing 



At the end of this month, the Win- 
dows programming world will com- 
pact itself into the halls of the LA Con- 
vention Center. For four days (five, if 
you include the preconference tutorials 
on Sunday, Oct. 26), Microsoft will lay 
out the Next Big Thing for those dedi- 
cated to using new technologies from 
Redmond. 

There will be some meaty sessions 
for conservative developers and some 
incremental releases of established tech- 
nologies and tools, but the Professional 
Developers Conference is really about 
new stuff — the technologies Microsoft 
thinks will excite developers, drive inno- 
vation and create new gravity wells to 
draw developers to its platforms. 

There will be some glitz: much more 
visibility into Windows 7, Silverlight 
demonstrations deploying rich media 
and dynamic languages, the Surface 
multi- touch display. Some of Microsoft's 
most skilled presenters (Don Box could 
make waiting in line at the Department 
of Motor Vehicles sound exciting) will 
bring the fuzzy "Oslo" modeling plat- 
form into sharper focus. 

If there's an overarching theme, 
though, it's cloud services and Live 
Mesh. I've described this before as chief 



software architect Ray Ozzie's "Internet 
tidal wave" — an initiative that actually 
deserves to be called strategic ("Internet 
tidal wave leaves a mesh," June 1, page 
47). But while Ozzie can, in theory, dic- 
tate the course for the SS Redmond, 
Live Mesh won't succeed unless the 
development community embraces it. 

The problem is that today's 
mainstream developers are 
generally looking for more- 
incremental technologies, 
particularly in corporate set- 
tings. The hardware environ- 
ment has stabilized; the 
manycore era may be upon 
us, but the penny has not 
dropped in enough minds. 
For most teams, 2008 looks an 
awfully lot like 2003: a couple 
of gigahertz of speed, a couple of giga- 
bytes of RAM, keyboard, mouse and 
1024 x 768. 

That complacency doesn't bode well 
for Microsoft. Incremental improve- 
ments are more likely to come from 
small companies, not large ones, and 
the clamor of the Microsoft haters is 
sufficient to ensure that Redmond gets 
little benefit from releasing technolo- 
gies that are as good as, or only margin- 




ally better than, the alternatives. 
Microsoft needs something like cloud 
computing — something that's big 
enough and complex enough to make 
Microsoft's size an advantage, but that 
won't require a leap of faith to a new 
type of hardware (even if such a shift is a 
certainty, as is the case with manycore). 
Microsoft's hardware pre- 
dictions have been off the 
mark in the past decade, 
with the TabletPC, Zune, 
Sideshow auxiliary displays 
and Windows Mobile all hav- 
ing failed to catch the imagi- 
nation of a broad develop- 
ment community. (I would 
like to believe that Surface 
can buck the tide of recent 
history, but given the high 
prices being bandied about, it looks like 
"desktop computing" isn't going to be 
redefined anytime soon.) 

In my earlier column, I suggested 
that the low-key launch and complex 
architectural diagram for Live Mesh 
made the technology seem like an ele- 
phant described by blind men. But 
"cloud services" is the single most-used 
tag in the PDC session list. This may be 
a proxy for its importance to Microsoft, 



since the competition for speaking slots 
at PDC is fierce. 

By the same logic, Windows Work- 
flow Foundation (WF) is, for the second 
PDC in a row, the technology with the 
biggest attention gap between Micro- 
soft's emphasis and the real-world buzz. 
At the last PDC (held in 2005), sessions 
on WF were crowded; booksellers at 
that event told me it was one of the hit 
topics. And the preliminary session list 
for the upcoming PDC has more ses- 
sions on Workflow than on parallelism. 

The final PDC session list is always 
fleshed out at the end of the first 
keynote by a slew of sessions on just- 
revealed technologies, and were I a bet- 
ting man, I'd travel to Los Angeles with 
an awfully large partition open on my 
laptop and no plans for sleeping on 
Monday night. Actually, sleep is always 
best deferred at PDC; Microsoft spares 
no expense at the after-hour parties, and 
birds-of-a-feather meetings often get 
started at midnight. 

The PDC is expensive, and its pace 
can be grueling. But it's the premier 
conference for advanced developers tar- 
geting Microsoft platforms, and it's 
absolutely worth the investment. 

See you there! I 

Larry O'Brien is a technology consul- 
tant, analyst and writer. Read his hlog at 
www. knowing, net. 
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EclipseWorld is coming 

EclipseWorld, the indus- 



eclipse 



~ try's first independent 
conference for Java 
developers, architects 
and development managers using 
Eclipse tools and technologies, returns 
to Reston, Va., at the end of this month 
for a deep dive into the worlds most 
popular Java tool platform. 

Produced by BZ Media, publisher 
of SD Times, EclipseWorld can help 
you and your team learn how to save 
money and improve Java productivity 
with Eclipse, as well as improve collab- 
oration using Eclipse-based Java tool 
sets. You will learn how to write better 
Java applications, whether you're an 
Eclipse expert, are just getting started 
with the platform or are exploring 
whether Eclipse is right for your team. 

Visit www.eclipseworld.net to regis- 
ter. And be sure to check out Eclipse- 
World chairman Alan Zeichick's blog 
for the latest news and updates at 
blog.eclipseworld.net. I 

CONFERENCE: Oct. 28-30 
Hyatt Regency Reston, Reston, Va. 

FULL-DAY WORKSHOPS: 
Tuesday, 9:00 am-5:00 pm 

TECHNICAL CLASSES: 
Wednesday, 9:15 am-4:30 pm 
Thursday, 8:45 am-3:50 pm 

EXHIBIT HOURS: 

Wednesday, 2:30 pm-7:00 pm 

Thursday, 10:00 am-1:15 pm 

HANDS-ON TOOL SHOWCASE: 
Tuesday, 6:00 pm-7:30 pm 

KEYNOTES: 
Wednesday, 8:30 am-9:15 am, 

Mike Milinkovich 

Wednesday, 4:45 pm-5:30 pm, 

Ivar Jacobson 

www.eclipseworld.net 



- Short takes 





AMONG SAN FRANCISCO confer 
ences, Oracles has long been the largest 
and most lavish. With swanky parties, a 
conference schedule that slots events into 
every nook and cranny of the Moscone 
convention center and enough attendees 
to choke every hotel in the city, Open- 
World is its own little world. 

This year, 
Oracle provided 
bicycle-powered 
laptop and cell 
phone chargers, 
and biodegrad- 
able food con- 
tainers, and it spent a great deal of time 
bandying about the word "green." It was 
an interesting evolution for the company. 

Overall, I'd say Oracle did a good job 
of loosening up its image. OpenWorld 
conferences in the past had always felt 
somewhat stodgy and out of touch, but 
this year's felt down to earth, accessible 
and friendly. — Alex Handy 

GOOGLE MAPS WITH GPS is out 

standing. My iPhone helps me find my 
way to off-the-wall places in Manhattan 
that I would otherwise miss while wan- 
dering around aimlessly. 

The user experience of the iPhone is 
far better than my BlackBerry was, and I 
am willing to deal with the phone's few 
shortcomings. I particularly like how fre- 
quently and easily my applications are 
updated. Updating an app on my Black- 
Berry meant a long reboot. 

It would be nice to be able to zoom 

my camera, but that's really not entirely 

necessary. The battery needs serious 

work, however; I am recharging it daily. 

— David Worthington 

IT'S NATIONAL CYBER Security Aware 



ness Month, and Secure Computing is 
kicking off its Cyber Security Initiative, 
which offers tools and best practices to 
organizations evaluating their infrastruc- 
ture protection. 

Secure Computing is offering key rec- 
ommendations for securing your systems. 
The first, obvious point is that security is 
not an option; it's a necessity. 

Second, security cannot jeopardize 
how your system works; protection layers 
cannot be so intrusive as to affect applica- 
tion performance. 

Third, security must protect assets, 
access and information. 

One point the company doesn't 
make: Security shouldn't be a tack-on 
at deployment. Developers must elimi- 
nate potential attack points during 
programming. 

Well-written code should be the first 
line of defense. — David Rubinstein 

NEARLY ONE-FIFTH of American 
households that use the Internet watch 
television broadcasts online, according 
to research from the Conference Board. 
The amount is 
double what it 
was in 2006. 

This is hardly 
a surprise. I've 
actually gotten 
into the online 
TV shows. One of the few television 
shows I watch with any regularity is 
ABC's "Lost," and when I miss it, I will 
watch it online. I like the fact that it 
only has a handful of commercials, but 
staring at a laptop or PC screen is 
nowhere near as comfortable as stretch- 
ing out on the couch in the traditional 
lazy fashion to watch shows on the big 
(or bigger) screen. — JeffFeinman 




BUSINESS BRIEFS 



Cisco Systems will acquire Jabbler, a Denver-based provider of 
messaging software. Cisco said the acquisition would let it embed 
presence and messaging services "in the network" and provide 
aggregation capabilities to users through local and on-demand 
products . . . ALM provider for distributed Java and .NET applica- 
tions dynaTrace Software named John Van Siclen chief executive 
officer. Van Siclen replaces founder Bernd Greifeneder, who will 
continue to serve as CTO. Van Siclen previously held executive 
positions with Informix, NetFRAME Systems and Interwoven 
. . . Serena Software announced plans to acquire Projity, a 
provider of open-source project management software. Serena 
executives said the acquisition would add the OpenProj desktop 
project management software and Project-ON-Demand SaaS ver- 
sion to the company's lineup. Serena hopes to bolster its Mariner 
project and portfolio manager with Projity's tools . . . McAfee is 
acquiring Secure Computing for approximately US$413 million. As 
part of the proposed transaction, Secure Computing's outstanding 
shares of preferred stock will be redeemed for cash, representing 
an additional $84 million, according to McAfee. McAfee executives 
said they expect to deliver the industry's most complete network 
security portfolio after adding Secure Computing's assets . . . 



VMware said vice president of product development Paul Chan 
resigned after seven years with the company. Chan's resignation 
follows the summer departures of the company's co-founders, 
spouses Diane Greene and Mendel Rosenblum. VMware did not cite 
a reason for Chan's resignation. His last day was expected to be 
Oct. 3 . . . Widget maker Clearspring Technologies is acquiring 
AddThis, a bookmarking and content sharing service. Clearspring 
executives claimed the combined companies would field the most 
widely used set of content sharing services on the Web. 

EARNINGS: Oracle reported net income of US$1.1 billion in its fis- 
cal 2009 first quarter, up 28% from the same period a year ear- 
lier. GAAP revenue was $5.3 billion, up 18% from the year-ago 
quarter. Total software revenue rose 20%, to $4.2 billion; soft- 
ware license update and product support revenue grew 23%, 
coming in at $2.9 billion . . . TIBCO Software reported third-quar- 
ter 2008 net income of US $11.1 million, up from $4.6 million in the 
same period last year. Revenue for the period was $162.3 million, 
compared with $135.1 million the year before, and operating 
income for the third quarter was $28.7 million, up from the year- 
ago quarter's $16.3 million. 



EVENTS CALENDAR 



00PSLA 

Nashville, Tenn. 
ACM SIGPLAN 

www.oopsla.org 



October 19-23 



TechExcel Users 
Conference 

San Francisco 
TECHEXCEL 

www.techexcel.com/conference 



October 20-22 



BlackBerry October 20-22 

Developer Conference 

Santa Clara 
RESEARCH IN MOTION 

www.blackberrydeveloperconference.com 



iPhone Developer 
Summit 

San Jose 
SYS-C0N 

www.iphonedevsummit.com 



October 21-22 



Embedded Systems 
Conference 

Boston 
TECHINSIGHTS 

www.cmp-egevents.com/escb 



October 26-30 



Microsoft Professional October 27-30 
Developers Conference 

Los Angeles 
MICROSOFT 

www.microsoft.com/pdc 



SD Best Practices 


October 27-30 


Boston 




THINK SERVICES 




www.sdbestpractices.com 




EclipseWorld 2008 


October 28-30 


Reston, Va. 




BZ MEDIA 




www.eclipseworld.net 




Software Business 


October 30-31 


2008 




San Francisco 




WEBC0M COMMUNICATIONS 




www.softwarebusinessonline.com/sb_conf08_index 


Dreamforce 


November 2-5 


Global Gathering 




San Francisco 




SALESF0RCE.COM 




www.salesforce.com/dreamforce 




ApacheCon 


November 3-7 


New Orleans 




APACHE SOFTWARE FOUNDATION 


us.apachecon.com 




WinHEC 


November 5-7 


Los Angeles 




MICROSOFT 




www.microsoft.com/winhec 




DevConnections 


November 10-13 


Fall 2008 




Las Vegas 




PENT0N MEDIA 




www.devconnections.com 




Supercomputing 2008 


November 15-21 


Austin 




IEEE AND ACM 




sc08.supercomputing.org 




CA World 


November 16-20 


Las Vegas 




CA 




www.caworld.com 





For a more complete calendar of U.S. software 
development events, see www.sdtimes.com/calendar. 
Information is subject to change. Send news about 
upcoming events to events@bzmedia.com. 
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Work with InterSystems. 



arate systems. 




The fastest way to have a connected workplace. 



Work with InterSystems Ensemble® software to raise 
productivity and lower costs. 

Ensemble is a rapid integration and development 
platform that makes it much easier to connect applications, 
processes, and people. IT managers who have switched 
from other integration products report they can finish 
projects in half the time with Ensemble. 

For your future development efforts, if you embed 
Ensemble you can create a new class of applications that 
are connectable. Plus, you'll be able to enhance legacy 
applications with adaptable workflow, browser-based user 



interfaces, rules-based business processes, dashboards, 
and other innovations - without rewriting your code. 

Ensemble's technology stack includes the world's 
fastest object database - InterSystems Cache®. Cache's 
lightning speed, massive scalability, and rapid development 
environment give Ensemble unmatched capabilities. 

For 30 years, we've been a creative technology 
partner for leading enterprises that rely on the high 
performance of our products. Ensemble and Cache are 
so reliable that the world's best hospitals use them for 
life-or-death systems. 



InterSystems 



See product demonstrations at InterSystems.com/Connectl6JJ 
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Get superior automated testing software 
for a fraction of what the big guys want 
to charge you. TestComplete is an 
award-winning testing solution that 
gives you functional, regression, unit, 
load, client server testing and more in one 
low priced pa ckage.lt tests any of your Windows 
applications: Desktop or Web, C++ or VB, .NET or 
Java, Flash or WPF. Don't throw your money away 
on overpriced software that does less than 
TestComplete. 



Download 

the free trial 

of TestComplete , 

- now! 



IV 




Award-Winning Features 



Easy Record & Playback 



Great Object Recognition 



Unlimited Extensibility 



/ 



www.testcomplete.com/try 



AutomatedQA 

testj debugs deliver! 

(978) 236-7900 



